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", 0x1000, 0x24000000, &(0x7f0000000000)={0xa, 0x4e22, 0x7ff, @local, 0x4}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  625.364420][T27353] binder: 27351:27353 got transaction with unaligned buffers size, 12
19:54:31 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:31 executing program 2:
socket$alg(0x26, 0x5, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:31 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

[  625.895566][T27380] binder_alloc: 27374: binder_alloc_buf size 27664 failed, no address space
19:54:31 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  625.950147][T27380] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:31 executing program 0:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  626.247284][T27401] binder_alloc: 27390: binder_alloc_buf size 29712 failed, no address space
[  626.275991][T27401] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0)

19:54:32 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:32 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  626.658138][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  626.692627][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000277ed6cd7e0890020000000038000000000000000000000000002000"/2136], 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:32 executing program 0:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

[  627.063253][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:33 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x540d, 0x0)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x7, 0x0, 0x1000, 0x7, 0x60})
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040))

19:54:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  627.133335][T27448] binder_alloc: 27437: binder_alloc_buf size 33554448 failed, no address space
[  627.142350][T27448] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="24804a32b16cb9216b649a8f748f31f0c0f5b9bd1d1e62d32a17cad5b6db3d52099881fb5cfa6c1a0b29fadc034f588310aa97c41fed1e7849d7efc499eb2c9ff9d474566d553b260400a1e6ba830f8fddcdc2564aebb7ef3a3f95042bf3fce028ab30c2d2ec5fe6808e355528cf862ad8f8db6ce99ce9ecbe4274c549c4cbcc0b6ed6f5e70268310c98f521075b6697e81481dc7136b8834ae2a55377df875f72f696ea57ca7cf0f0509e28b808715482a043e21baa0d67d44a5030a037933a7e641fddae5ccaf60e0b43560d2aab48791c013c4e", 0xd5, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="2229932e2184f3dee2a85223694e4e5cff57946e5fb3293fe217e5f5c29eca376fcc51e91df1dc9a6b6a514e7f45f5d456e2b7e0cf0d7d65ffc2aecee61850accc488c055dc78f12bb0e0098b8e0e33650cc20a9a2138af743a906f2335d9786efbef133f9add576812efc82764696e320a6088f8048b935ef54817ffc12b4223283d094a70e33b010e391658d5c10975d1027dc69123ba77370586a1b9b79ff3a26e1efaabe0f0d68052799c1630809ede220877e853c41c7", 0xb9}, {&(0x7f0000000380)="78229b9257f6742955094f44fa7b87c00da47da750870c9ed912ea9e84d0724e2d3e00219e628518fc350afbddb74ab7f54922fa37cc24f0578cb9b4b37c73281aa377163e0aac2f7418d92feebfd0b0dc0f23d8a334df2134c83b00bd861641c1b87871448a4d1d114675444d0610b58c0f82a445fb2aad84b3dafec3f7aeff932b40af4003061a0d71f04a98599ca05dba00ba3caf2cb38c4032aadea8b3d106cb4452741a8a0112ce60e25b1276748f283c", 0xb3}], 0x2, r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$KDADDIO(r0, 0x400455c8, 0x9)

19:54:33 executing program 0:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:33 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:33 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

[  627.401837][T27456] binder: BINDER_SET_CONTEXT_MGR already set
[  627.423219][T27456] binder: 27455:27456 ioctl 40046207 0 returned -16
19:54:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  627.647902][T27477] binder_transaction: 45 callbacks suppressed
[  627.647919][T27477] binder: 27476:27477 transaction failed 29201/-22, size 0-0 line 3211
[  627.701591][T27480] binder: 27476:27480 transaction failed 29201/-22, size 0-0 line 3211
[  627.860508][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0x4000000000000}, 0x1c)
listen(r1, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/null\x00', 0x81, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000f40)={<r3=>0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x100000000, 0x8, 0x80000000, 0x800, 0x101}, &(0x7f0000001000)=0x98)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001040)={r3, 0x4, 0x4, [0x2, 0x2, 0x101, 0xfffffffffffffffd]}, &(0x7f0000001080)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000d40)={<r4=>0x0, 0x8}, &(0x7f0000000d80)=0xc)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000dc0)={r4, 0xff, "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"}, &(0x7f0000000f00)=0x107)
getsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000a40)={'syz', 0x1}, &(0x7f0000000a80)="758ee6ba0c89ddd70e8ad078a8f4fd4b15b8f5ab92a2ad2cb526df2e530928d3a593d7d1a29ee80235824a3d7771d1d801f644a580137d0e51eec4c7164a07fcf3b91e6ccbe9d574f720a1ca97732369af0426e818157c7538c3a966f44a570e74fbcd2fd4e144c30e3bc976f404fc58ac62952058826c2e66c437d0b626645bc179f5", 0x83, 0xfffffffffffffffc)
r6 = request_key(&(0x7f0000000bc0)='.dead\x00', &(0x7f0000000c00)={'syz', 0x0}, &(0x7f0000000c40)='tls\x00', 0xfffffffffffffffa)
keyctl$search(0xa, r5, &(0x7f0000000b40)='syzkaller\x00', &(0x7f0000000b80)={'syz', 0x3}, r6)
fsetxattr$security_evm(r0, &(0x7f0000000c80)='security.evm\x00', &(0x7f0000000cc0)=@md5={0x1, "7061681fe31f86c609ee24d1fca38078"}, 0x11, 0x2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:33 executing program 2:
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:33 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:33 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  628.027673][T27494] binder: 27492:27494 transaction failed 29189/-22, size 0-67108864 line 2995
[  628.052247][ T7967] binder_release_work: 47 callbacks suppressed
[  628.052256][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  628.067597][T27497] binder: 27492:27497 transaction failed 29189/-22, size 0-67108864 line 2995
[  628.087579][T27489] binder: 27488:27489 transaction failed 29201/-22, size 0-0 line 3211
[  628.105553][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:34 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  628.171069][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:54:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000ac0)={0xa, 0x4e22}, 0xffffffffffffffa0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f0000000a40)="f1cfefc88a9d60dca22e9f7f4e6fb0eed603181beab1fa9ef179af4bf3cdbacfe0de74273c9f0b06187e0396c1b42d0062d7178736c62ea12e0e93a69298f14d7a0bd59f061fa01b3c62d3affb1d7140e66605ffe5a660632a59ce816574e3895216d107966cf3054846135108a420aa1694fdd089487aecbb01f153", 0x7c, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @mcast2, 0x8001}, 0x1c)
r2 = syz_open_dev$usb(&(0x7f0000000c40)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000c80)={<r3=>0x0, 0x9}, &(0x7f0000000cc0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000d00)={r3, 0x54}, &(0x7f0000000d40)=0x8)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)
r4 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x2, 0x10400)
write$P9_RLINK(r4, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7)

[  628.217270][T27504] binder: 27488:27504 transaction failed 29201/-22, size 0-0 line 3211
[  628.280058][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:54:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  628.375976][T27510] binder_alloc: 27488: binder_alloc_buf size 83886096 failed, no address space
19:54:34 executing program 2:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x800, 0x0)
ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000080))
r1 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0xffffffffffffffff, 0x2)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000000)={0x0, 0x3ff, 0x4})

19:54:34 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

[  628.472911][T27510] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  628.502299][T27510] binder: 27507:27510 transaction failed 29201/-28, size 0-83886080 line 3148
19:54:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209856ad62446a7100"/2136], 0x858)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x401, 0x0)
epoll_wait(r2, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  628.524259][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  628.539611][T27520] binder: 27507:27520 transaction failed 29189/-22, size 0-83886080 line 2995
[  628.554898][T27518] binder_transaction: 17 callbacks suppressed
[  628.554910][T27518] binder: 27516:27518 got transaction with unaligned buffers size, 12
19:54:34 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x4000000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c)
times(&(0x7f0000000080))
sendmmsg(r1, &(0x7f00000089c0)=[{{&(0x7f0000000440)=@in={0x2, 0x4e20, @multicast2=0xe00002ff}, 0x80, 0x0}}], 0x300, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")

[  628.589125][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  628.613233][T27518] binder: 27516:27518 transaction failed 29201/-22, size 0-0 line 3211
19:54:34 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  628.635918][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  628.649666][T27518] binder: BINDER_SET_CONTEXT_MGR already set
[  628.662020][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  628.662614][T27528] binder: 27516:27528 transaction failed 29189/-22, size 0-0 line 2995
[  628.681902][T27518] binder: 27516:27518 ioctl 40046207 0 returned -16
19:54:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  628.694533][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  628.804883][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  628.811164][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:34 executing program 1:
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
listen(0xffffffffffffffff, 0x0)
close(r0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
getpeername$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
syz_init_net_socket$llc(0x1a, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0//ile0\x00', 0x106)
rmdir(&(0x7f0000000340)='./file0//ile0\x00')

19:54:34 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  628.895958][T27543] binder: 27542:27543 got transaction with unaligned buffers size, 12
[  628.929530][T27544] binder: 27542:27544 got transaction with unaligned buffers size, 12
19:54:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 1:
clone(0x8000ffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000280)=""/242)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r2 = getpid()
rt_tgsigqueueinfo(r2, r2, 0x4000000000014, &(0x7f00000000c0))
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x4040, 0x0)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000200)={0x0, r3})
ptrace(0x10, r2)
sendmsg(r1, &(0x7f0000000cc0)={&(0x7f0000000400)=@ethernet={0x307, @random="b04e0b52d7bf"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="48c27b211e64ae40b961daa7f1d223109f9ee8fd98fe6ef8d821e1ad6ee542777c2263effcfe51dc86e8b011a688fbe1baed7209c302d0262d229e139bbc0e43feeab7ca086104737be192f0efcbd7019172c8a664e70a5738a5dd639cc9fd635b537dfaebc82f79fdc96542b73195634f4c8a77beda89479a73951594304e80f656a884d51594d58c795b4243e0946c00003bcac81858c3f113177380dc9b69718cd598c66ccef7259a3029805b4909f5944895fda5a84394c2025b566850f9132f1d7f5f8830", 0xc7}, {&(0x7f0000000580)="323909eb5a38f07e8f2aff75c01923bada87ecb7d5c9acc7338a521404bac1b20397a6b6d4762d1fc6ce528737ec8f93c140c5d1ab284d7dde083497513f4693c5c187ab03a5d83c4ebfc5028cebce6b274bafccfbd276bb08815f39f5001b118460032082adacea8d56eb0ce30f8396808d98fdc8f0cded9902b0c6c5279d21f65f76e285d4ac6be5e9f57787be3f", 0x8f}, {&(0x7f0000000640)="306e04e88d7d746a0434e3c127a96b4e35bbdc042bd2504226e65f6d6bff6285397151c17250069f65c4802d6071cd8aff557cbf1526ccb292d4681f5e2d242b9ebdb1fa9029bdd24d14b1238e6a125ca071e9c1", 0x54}, {&(0x7f00000006c0)="fe65ba509b275e56840799f2a04a4b58eb532050c34cf0a2802d63378cfe20edf50988e5359643a3250ea53b7e64976e044ee2469f675a3bfa9c3fe7a0e6cc1c5bcefc1c8da476ed11da9ff7dcaf4178267b6b6e753a", 0x56}, {&(0x7f0000000740)="9910e5461a8c2c27348256d3008f5118c124fb247a028087d0b171ba8523adff78c5a7bc39bdbba76b8ffa953552d4e02303d9124b3ef07f3aa60cfac7d67b8feb4e518b5bffb629b3fed117ff5ccf00102da9cd96278d044ea4b8401f19971426537ea48775", 0x66}, {&(0x7f00000007c0)="722dbce20957da34773359268ec14c4078c3e6551b10080d35520bafe559caa236ebae4fff8569460e987aa9cdf1d4149748e301f11e13f676bf436c58d021ba576ceac86bceaf259dd44514266641c795334d658da10db59cfc42edd5c317c6dd67eb37e10637b17b", 0x69}], 0x6, &(0x7f00000008c0)=[{0x50, 0x19f, 0x67, "7fa062361ca6a638b37ecebbd638a9592dbb64e2c79df44228d5a06d6d24a9ed71f8d776cc23af03383c6c41cee909f975380c8cb065d6316232c8"}, {0x90, 0x112, 0x5, "fd91cb947560ab99b64e8e53846c480ebc6f49bb4738ea7b97f87a0731120d420672929c8e8816406196779f083a07eac0053d18aac51d56ac13d2820ae5e75206da8f86ac466446e12125f55f8ff7da455e7249cd67695afab724e043b4e5ad592388467cd6a8a906d6251ff849e80a90685e88cf455ffb4ccce244e68fb6e7"}, {0xa8, 0x117, 0x89e, "9434ba036b02a1001764698c2826029e4dc813da7e075d6f92f47529dc470ac85d056b058d2d3bf954af59379773bdbca0d31d24a4b79da1653c73af4bcdc934a2c5db6e2cc0f952c583baca9c17381ca17e59a70760c4f439c9e32a961de7fbf3dbbc99a40575071a632d1515959b6d740557d6ff3e9ac183120d7b62433132efb05a48d99eef741fa0c7170bd9fded32344a"}, {0x88, 0x10f, 0x9, "e8ccad79eeaf5047dc912b35613c6c17d83da8fcdddf7aa7384c848b6cb804789515a95945dd0b88de5eb21b3763693ff3a89ca2488d5dd4c96f1e33331f53661e4f1cf86594f85762801faf729b08627f5ee49e466f29f59a796c7393048b04dc74a16a396ca2ffa0e5c23ced2b46835afc9ceb0e"}, {0x10, 0x84, 0x100}, {0x28, 0xff, 0x2, "0d55ecbe1760c7f559c7e36fb21326a8e4c7"}, {0xd0, 0x10c, 0x5, "e6149a63fa0afa355d2d07b7b892a07075010b01050e792cc58160d0659ea9428c0e4304a2b2c9fce0aa07fe091eddfa126e14883358adbf2638b273084a5ffaec5d7a117a1a62e6492a22097ce5b1bd6c308182f81c3084828eb4ff1b26c2d2a2b7e9c47c46221f2005ac5d78200919bbbc995a4052c938c211a142483a707056e0fbd793dc56b20b694acf0c0b7555f3fc2c9adc62cbfb2af3d3b2fb3ae0861de085d8dcfb822c763a91e502add73339c72b6ff66bbb279932a0467a2a23"}, {0xb0, 0x105, 0x1ff, "df1b8a89bb06b11a8ec8f5ff75ba16338ab9cd2864064509a59e7e9e7b74860bcd8d328a2e6307d7f735f10b563df64e7fbf4fc49f26dfbb7ff66b8e747d2dd00a246729e2f30e6810f9afbcebbd09b4cc214a4cc65a74e003ad021d73e2b9eea8626eb266bc1d0b16a17335a63f25bcf111c7672449ffa09b4f82870707f7bdab6f30a81e7c1e901517b3df56d59694f7ec3e1faa8d2b99f07b"}, {0x30, 0x103, 0x2, "bda51c79a918aeb8b60f064ab72293596cfbc6b35fc20f615bb5f64e"}], 0x3f8}, 0x8000)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2400, 0x0)
waitid(0x1, r2, 0x0, 0x8, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4200, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000d00)={@dev={0xac, 0x14, 0x14, 0x12}, @rand_addr, @empty}, 0xc)
ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000140))
write$P9_RREADDIR(r4, &(0x7f0000000380)={0x49, 0x29, 0x1, {0x1ff, [{{0x0, 0x2, 0x5}, 0x3f, 0x2, 0x7, './file0'}, {{0x8, 0x4}, 0x20, 0x8, 0x7, './file0'}]}}, 0x49)
ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000040)={0x30fa04eb, 0xffff, [0x7, 0x6, 0x7, 0x7, 0x1], 0x9})

19:54:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  629.154421][T27557] binder: 27556:27557 got transaction with unaligned buffers size, 12
[  629.171990][T27558] binder: 27556:27558 got transaction with unaligned buffers size, 12
19:54:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  629.265677][T27565] binder_alloc: 27556: binder_alloc_buf size 167772176 failed, no address space
[  629.308077][T27565] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  629.381581][T27572] binder: 27569:27572 got transaction with unaligned buffers size, 12
[  629.425537][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  629.456283][T27575] binder: 27569:27575 got transaction with unaligned buffers size, 12
19:54:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x16)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x0, 0x0)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f0000000740)=@rc={0x1f, {0x0, 0x2, 0x8000, 0x1, 0x80, 0x10000}, 0x7ff}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="df229356740d5e19dc9599b956c44ba8d28ec1955b38d069b03e9f801f63780e4796f744d5cdeb03ff2bed1f6a38f76f9450dfdbe6721183226acff12f99c14207bc7dd8218a7ab3c4a191801692a811e76e0701b393fdb8de641b41d6f7e8e6a7973c1d503263c0f93eb5eebaafd6039d101a577395d686316cc08c21eb476b44192e9df5b9ef3602032f92b11975996f4373d998545bcfc3f2f4e8b10bea2e90", 0xa1}, {&(0x7f0000000880)="98e134a8188c5bc605adaa8290ac9f9ba3b79dda8729b511767abea259284f1966c4c6ce1327b8082155991af97dec6cf3dd63f26b", 0x35}], 0x2, &(0x7f0000000900)=[{0x28, 0x13b, 0x3, "fbdf996095fffd3e58137e26648eaa4fa0"}, {0x18, 0x1, 0xdc, "3a3e1d6d406a"}, {0x30, 0x0, 0x0, "cc1101f1dbf0eeacea7243cbc2f2c301334e1231bb50e880e587a5"}, {0x50, 0x88, 0x5, "9815d247281791454e318e816cc696015aa2acb183b62526176436898abe23360fa4037bd2216ca76a3b641cb93b97129b3ce0c83a4cc94f64"}, {0x68, 0x86, 0x2, "2963a6a82363d86ed9d841c1a558ba840a462749244b96eb16264342c31b6c33419c94f0053c5cc4f8838327797255f9c097f63300013b04d3594ae61667284645a438060627cf72581f7ef0030785edba19a05e"}, {0x1010, 0x10d, 0x0, "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"}, {0xb0, 0x10d, 0x1, "dc62c2557360f052d12eab4bab320b8672c9303d1dd705066cfe479c2a7179ff5712d03616f53b05d2487007b7b38b6a609e4a28c9f74546839bcb23e01c1dc03af2eafe08b996a2cd9de73655478ce0551e0b566f693dd6f4492e06d2150fd3568e4fa4f068561073e3f43afdb63345f0a75a84cc232459c4b1041232a0541016acf00c78cce78dddc5b37a1c28322fb46496707fa3721d7e9ed528"}, {0x30, 0x11f, 0x80000000, "b91896492e2e79a1c65d694333e819d70d7953ff2eb312effe4126f524"}], 0x1218}, 0x2400c000)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/67})
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e8d2899e3b5ec2585b7a1536598f5c9ab4b5f018589a781c98fcae7355c60042", 0x20)
syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000001b80)={"e657e59de10f6c781067e85c02b8b5d5a698a91f4bee9722035a7baadae2cc0117b016a3d697d441c2a8874f7da678149476bfbf51cd336d19a772da94842660a6cd60de4b9b95cc05d13e8eea9fe56a6d96c35f28d35f0c500b9d6f0da42fe6cf6e1862cda46d9d2092dc0e70e40435f068d9263eaa794e6069a18cde1dcf8214f59d331a881d5a98a1f4e1382fea6062736fd8840bd093fbcb424851a9906e6fbac770fa136239c97653848d46336d46697bf6b79418173b04eea1190745358be5e12ada899a9bf346d6b1dbd5a1760e87d84e4d46f4cb2c3b70ff08583aef75e8c22cb277c8a33580c3b93e8de615590ef7ee8458a55524292f0dcea163cccaaf70f797236a42f7cd1bdde414e909b9b6975f5caa87208e49e51979675ff22368f55418ac4749df92f00a1fc0b01c7d0521115d4ca9b8f699a368373ffb717e12123e57e165ab1cc3f32e3857e74a1e3f25f12e7c5e607e249fb9a96c12292997493a00f9d1448911851169e0ecc5e10b42977619b409f445dbf6d7483ca6f8976eff486564a3f375d0ad5b833eba3f55fb76a76996c38c514c3bc6d361db0a6c817efa1ad0c80ac73408a55acca9b6b3436344b290587a1056515149be5f1204bf759b886c12990a542f31113b612e4516087d421f8b0096e33040bd9af8a108e21b1f15cdc2b6e7957e59ab63928436dd3282ab17e29e914ba5cde3a23eb41eb64580cc2b95e9c459667fbb24c6601f380a73d204de868f5bc14628bbe964b10f22d496b826821cc771e27d04754491231da51bc28e4af1b7da281b4eeefd80d14f69051e4a677de2dbb4f5a96efaa2f4f194cc129179a13fd8ff2056cea104dd06019bf46ec76681a2725f42b9c2d3b69529971cd59f04bc60f436e10476f7af192e4a5b76b17c94599d505cd11db756bfcd7bd37e4a6550643182e3e4889f3446113c359b94cbdf37dbac3ecf71cecbaa51592620d3a83642acd4409c17cf151107b150b1eb571ec636567fafc8eb2bfd1f15d7cd7c3a97324c01945057cc7830919a9cb72cf5771c5f2b1efd6b10e16727efa8c88ef82fe627ea19d24d4ca7d745e5e4e159f116d9eb0050e9a82f156dd998e3669ad866736dc5f1afac424a13930e6ef7245c413697e79ec9713d005d68c962e462f31bd0c91d6d795e07bed5946dbff70f0eaaf6680f31a8fdf56e56a70f5a4373968bb07c18c1741e6a998c15fe0f0a5e947e23ece8290f85396339b089bb83b8ad80fa09d1516621b828cf4171e0fc67900fdb20a5525f0997080c65d802510f54e4cc9998c2dbe32ff6aea13227ef413e9388bb19cc0224ad9162c3709cb4c0348489a4eed56866bb09cba3239eb03259baa022999a22a759668b2bbbbb44f7c74df60e73fc774636eb736384b8ca424ce8f3b58bbbd4a552421f99275e290979303ef0c00729"})
epoll_pwait(r1, &(0x7f00000006c0)=[{}, {}, {}], 0x3, 0xffff, &(0x7f0000000700)={0xfff}, 0x8)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)

[  629.563580][T27581] binder_alloc: 27569: binder_alloc_buf size 268435472 failed, no address space
19:54:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  629.607710][T27581] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x1, 0x1, 0xe83})
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0xfffffffffffffe96)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  629.816582][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  629.820006][T27604] binder: 27597:27604 got transaction with unaligned buffers size, 12
[  629.850344][T27608] binder_alloc: 27597: binder_alloc_buf size 1207959568 failed, no address space
[  629.875890][T27608] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
[  629.905556][T27617] binder_alloc: 27597: binder_alloc_buf size 1207959568 failed, no address space
[  629.915893][T27617] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x0, 0x0)
sendmsg(r0, &(0x7f0000001b40)={&(0x7f0000000740)=@rc={0x1f, {0x0, 0x2, 0x8000, 0x1, 0x80, 0x10000}, 0x7ff}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)="df229356740d5e19dc9599b956c44ba8d28ec1955b38d069b03e9f801f63780e4796f744d5cdeb03ff2bed1f6a38f76f9450dfdbe6721183226acff12f99c14207bc7dd8218a7ab3c4a191801692a811e76e0701b393fdb8de641b41d6f7e8e6a7973c1d503263c0f93eb5eebaafd6039d101a577395d686316cc08c21eb476b44192e9df5b9ef3602032f92b11975996f4373d998545bcfc3f2f4e8b10bea2e90", 0xa1}, {&(0x7f0000000880)="98e134a8188c5bc605adaa8290ac9f9ba3b79dda8729b511767abea259284f1966c4c6ce1327b8082155991af97dec6cf3dd63f26b", 0x35}], 0x2, &(0x7f0000000900)=[{0x28, 0x13b, 0x3, "fbdf996095fffd3e58137e26648eaa4fa0"}, {0x18, 0x1, 0xdc, "3a3e1d6d406a"}, {0x30, 0x0, 0x0, "cc1101f1dbf0eeacea7243cbc2f2c301334e1231bb50e880e587a5"}, {0x50, 0x88, 0x5, "9815d247281791454e318e816cc696015aa2acb183b62526176436898abe23360fa4037bd2216ca76a3b641cb93b97129b3ce0c83a4cc94f64"}, {0x68, 0x86, 0x2, "2963a6a82363d86ed9d841c1a558ba840a462749244b96eb16264342c31b6c33419c94f0053c5cc4f8838327797255f9c097f63300013b04d3594ae61667284645a438060627cf72581f7ef0030785edba19a05e"}, {0x1010, 0x10d, 0x0, "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"}, {0xb0, 0x10d, 0x1, "dc62c2557360f052d12eab4bab320b8672c9303d1dd705066cfe479c2a7179ff5712d03616f53b05d2487007b7b38b6a609e4a28c9f74546839bcb23e01c1dc03af2eafe08b996a2cd9de73655478ce0551e0b566f693dd6f4492e06d2150fd3568e4fa4f068561073e3f43afdb63345f0a75a84cc232459c4b1041232a0541016acf00c78cce78dddc5b37a1c28322fb46496707fa3721d7e9ed528"}, {0x30, 0x11f, 0x80000000, "b91896492e2e79a1c65d694333e819d70d7953ff2eb312effe4126f524"}], 0x1218}, 0x2400c000)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/67})
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="e8d2899e3b5ec2585b7a1536598f5c9ab4b5f018589a781c98fcae7355c60042", 0x20)
syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000001b80)={"e657e59de10f6c781067e85c02b8b5d5a698a91f4bee9722035a7baadae2cc0117b016a3d697d441c2a8874f7da678149476bfbf51cd336d19a772da94842660a6cd60de4b9b95cc05d13e8eea9fe56a6d96c35f28d35f0c500b9d6f0da42fe6cf6e1862cda46d9d2092dc0e70e40435f068d9263eaa794e6069a18cde1dcf8214f59d331a881d5a98a1f4e1382fea6062736fd8840bd093fbcb424851a9906e6fbac770fa136239c97653848d46336d46697bf6b79418173b04eea1190745358be5e12ada899a9bf346d6b1dbd5a1760e87d84e4d46f4cb2c3b70ff08583aef75e8c22cb277c8a33580c3b93e8de615590ef7ee8458a55524292f0dcea163cccaaf70f797236a42f7cd1bdde414e909b9b6975f5caa87208e49e51979675ff22368f55418ac4749df92f00a1fc0b01c7d0521115d4ca9b8f699a368373ffb717e12123e57e165ab1cc3f32e3857e74a1e3f25f12e7c5e607e249fb9a96c12292997493a00f9d1448911851169e0ecc5e10b42977619b409f445dbf6d7483ca6f8976eff486564a3f375d0ad5b833eba3f55fb76a76996c38c514c3bc6d361db0a6c817efa1ad0c80ac73408a55acca9b6b3436344b290587a1056515149be5f1204bf759b886c12990a542f31113b612e4516087d421f8b0096e33040bd9af8a108e21b1f15cdc2b6e7957e59ab63928436dd3282ab17e29e914ba5cde3a23eb41eb64580cc2b95e9c459667fbb24c6601f380a73d204de868f5bc14628bbe964b10f22d496b826821cc771e27d04754491231da51bc28e4af1b7da281b4eeefd80d14f69051e4a677de2dbb4f5a96efaa2f4f194cc129179a13fd8ff2056cea104dd06019bf46ec76681a2725f42b9c2d3b69529971cd59f04bc60f436e10476f7af192e4a5b76b17c94599d505cd11db756bfcd7bd37e4a6550643182e3e4889f3446113c359b94cbdf37dbac3ecf71cecbaa51592620d3a83642acd4409c17cf151107b150b1eb571ec636567fafc8eb2bfd1f15d7cd7c3a97324c01945057cc7830919a9cb72cf5771c5f2b1efd6b10e16727efa8c88ef82fe627ea19d24d4ca7d745e5e4e159f116d9eb0050e9a82f156dd998e3669ad866736dc5f1afac424a13930e6ef7245c413697e79ec9713d005d68c962e462f31bd0c91d6d795e07bed5946dbff70f0eaaf6680f31a8fdf56e56a70f5a4373968bb07c18c1741e6a998c15fe0f0a5e947e23ece8290f85396339b089bb83b8ad80fa09d1516621b828cf4171e0fc67900fdb20a5525f0997080c65d802510f54e4cc9998c2dbe32ff6aea13227ef413e9388bb19cc0224ad9162c3709cb4c0348489a4eed56866bb09cba3239eb03259baa022999a22a759668b2bbbbb44f7c74df60e73fc774636eb736384b8ca424ce8f3b58bbbd4a552421f99275e290979303ef0c00729"})
epoll_pwait(r1, &(0x7f00000006c0)=[{}, {}, {}], 0x3, 0xffff, &(0x7f0000000700)={0xfff}, 0x8)
bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)

[  629.952079][T27620] binder: 27597:27620 got transaction with unaligned buffers size, 12
19:54:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc)
r1 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
write$vnet(r2, &(0x7f0000000200)={0x1, {&(0x7f0000000140)=""/73, 0x49, &(0x7f00000001c0)=""/34, 0x1, 0x3}}, 0x68)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x200006, 0x0, 0x0, 0xa1}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10)
sendto$inet(r0, &(0x7f0000001040)="c3401c344654f3c7d9fe1ba48c8e390002000000000000d65cffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9b87010227a60d177faf6502ceab47e58034347b289546c65a5eb278de72b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d0c00"/130, 0x82, 0x1, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

19:54:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 2:
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468315f746f5f7465616d000000736974302000000000000400000000006272696467653000000000000000000076657468305f746f5f627269646765000180c2000000000000000000aaaaaaaaaa0000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000007465716c30000000000000000000000073797a5f74757e000000000000000000697036677265300000000000090000007663616e30000000d5691b3b00000000ffffffffffff000000000000aaaaaaaa98aa00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x250)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x2, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bc\x00', 's\x01\x000\x00\x00\x02\x00\x00\x00\xff\xff\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0xb8, 0xb8, 0x130, [@limit={'limit\x00', 0x20, {{0x0, 0x9}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "2ce719c99cffcbf4d7e80e410bb5007c6981466b6431c7e6b129fcead3f149b589996102627779dc3b23bf8250fc3acd9e8be08a4bbab9be219f504cae3a7e4d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffdfffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x238)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0)={0x6, 0x7fff, 0x7f, 0x1}, 0x6)

19:54:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  630.251210][T27636] binder: 27634:27636 got transaction with unaligned buffers size, 12
[  630.287331][T27639] ebtables: ebtables: counters copy to user failed while replacing table
[  630.323674][T27641] binder_alloc: 27634: binder_alloc_buf size 1744830480 failed, no address space
[  630.339725][T27642] ebtables: ebtables: counters copy to user failed while replacing table
19:54:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x6, 0x42000)
sendto$isdn(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="18aa00000000008091f6258cbedab5ba291038dd2ddc28aec92264578583e68f4a93fc13c6433449cd8b75c69d022ede680591b9f41021ae15b4d06379a37ede8f1f8e379af6894eea666bafef0b8bc5ff312bbdadbb6082b2f0b051b62cb236660e34c7e8f5680f1adc2f004aaf870fb72c25c16899b06181279a00"], 0x7c, 0x0, &(0x7f0000000200)={0x22, 0x81, 0x8, 0x7ff, 0x4}, 0x6)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r2 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680})
r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3ff, 0x800)
setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000100)=0x3f, 0x4)

[  630.364274][T27641] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
[  630.401851][T27636] binder: BINDER_SET_CONTEXT_MGR already set
19:54:36 executing program 2:
r0 = socket$kcm(0x2, 0x2, 0x73)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000500))
bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10)
connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80)

[  630.433626][T27636] binder: 27634:27636 ioctl 40046207 0 returned -16
19:54:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  630.612692][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x82001, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000a40), &(0x7f00000000c0)=0x60)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
semget(0x0, 0x3, 0x400)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r2, &(0x7f0000000bc0)="07f088e9820292f8a962041665950db530cc052ec2b4ded67776088aa467a98bfe157e6647035d909a8a4006000000baef4e2fdacac1f87e25529fee6da77053002981b83aa30835b7bdf0d88b067058d3bc0f100c6dd874abb2f50f757f2c0142226d047b460ae4f00d0a3992cfe6959fbba276e8e6287259b037d95d37f663181e341f5bfed541f13029fa69d63d8d789c93f3588311dc286a442a0eb67c3a55533587254b345a28b64c505368e15cd3912f3968e3cc2d5c6545bc6280da260d9b603aa1fa0ccbcd0fb83e7c06b4eed7f27e3e2facb8278ac119615b2114a94e1b3f6dfb34", 0xe6, 0x0, 0x0, 0x0)

19:54:36 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000100)={0x31, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e24, @empty}}}, 0x108)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r2 = socket(0x400020000000010, 0x2, 0x0)
write(r2, &(0x7f0000000080)="1f00000055000d0000000000fc07ff1b070404000d00000007000100010039", 0x1f)

19:54:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x5, 0xffff, 0x8, 0x28c, 0x3, 0x3e, 0x9, 0x38f, 0x40, 0x9a, 0x4, 0x1, 0x38, 0x2, 0x3, 0x1d86e48e, 0x81}, [{0x60000007, 0x100, 0xfe5f, 0x101, 0xfffffffffffffff8, 0x95, 0xcdcc, 0x8}], "d8ada1627d93d67f65aed0176a7d70161199db707b58a58bd5bd3ad81b7807d094cb863cb5480b41e5c2f0992451d92acfa5c8b351a59c7f7abbfbe2b5a2af2a8f7ee3f4da9395837c42448c46ab10c1a83ad541f94ef4bcdbd30174e0458504dca8e2d39c1b3d7527a4982b667bd285b57a6cc1d49d266c3a21fc727de0114c7f6c98a07223c17966466a2b7147678d9b5b44f2c94e4f4318c972d34d25ec983893b4d705945455f202da5aa005cb0149907ff06a6e1a2e7f20bb5f9c9bcfa09b58", [[], [], [], []]}, 0xfffffffffffffffe)
truncate(0x0, 0xfffffffffffffffc)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000600), &(0x7f0000000640)=0x4)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1f})

[  630.730107][T27665] PF_BRIDGE: br_mdb_parse() with invalid attr
19:54:36 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00\"\x00', 0x6})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)=ANY=[])
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x200000000001, r2})
close(0xffffffffffffffff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0xffffffffffffffff, 0x0)

19:54:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 2:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020460000200027400f8", 0x16}], 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x81, 0x80000)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x4000, 0x0)
renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00')
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f0000000080)={0xfffffffffffff55f, 0x20, 0x7, 0x200})

19:54:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x2, 0xfdd3})
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:36 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x805, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x101, 0x204000)
ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]})
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x39})
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000c80)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

19:54:36 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400000101000, 0x0)
connect$inet6(r0, 0x0, 0xffffffffffffff43)
r2 = dup3(r1, 0xffffffffffffffff, 0x80000)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f00000000c0))
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffff9c, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x5d8, 0x178, 0x178, 0x178, 0x0, 0x3e8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x4, &(0x7f0000000040), {[{{@ipv6={@mcast1, @mcast1, [0x0, 0xff000000, 0x0, 0xff], [0x0, 0xff000000, 0xffffffff, 0xffffffff], 'veth0_to_team\x00', 'lo\x00', {0xff}, {0xff}, 0xaf, 0xfff, 0x4, 0x1}, 0x0, 0x118, 0x178, 0x0, {}, [@common=@unspec=@pkttype={0x28, 'pkttype\x00', 0x0, {0x5, 0x3}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x7, 0x5, 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1, [0xffffffff, 0xffffffff, 0x432af83c11e48af4], 0x4e20, 0x4e24, 0x4e22, 0x4e20, 0x6, 0x5, 0xe6, 0x2, 0x48}}}, {{@ipv6={@rand_addr="1ab9c682b9e4547a6b5eb9200fd9a13b", @loopback, [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], 'lapb0\x00', 'rose0\x00', {}, {}, 0x67, 0x9, 0x1, 0x4}, 0x0, 0x230, 0x270, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d2, 0x6, 0x6008, 0x3}}, @common=@rt={0x138, 'rt\x00', 0x0, {0x9, 0x1000, 0x8, 0x1, 0x30, 0x4, [@ipv4={[], [], @empty}, @local, @ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x1c}, @local, @ipv4={[], [], @multicast1}, @local, @rand_addr="d3391cc72b9373a241c0403e61744e11", @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, @loopback, @remote, @loopback, @local, @remote], 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x2, 0x28, "bfb85bfdf957de16f3672fefcc04ea88bbefe56d9bee33e4ca89e164aead"}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0xbf, 0x5, 0x7ff, 0x4, 0x933, 0x280, 0x1244}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x7, 0x96}, {0xa7ca, 0x600000000, 0xfffffffffffffffd}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysfs$2(0x2, 0x0, &(0x7f0000000580)=""/218)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x0, 0x4)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000540)={0x0, 0x0})
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080))
unshare(0x40000001)

19:54:37 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 2:
r0 = socket$inet(0x2, 0x200000000003, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
getpeername$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, 0xe8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0)

19:54:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 1:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x43, 0x0)
ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000100))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x81, &(0x7f0000000000)="0adc1f123c123f319bd070")
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={<r2=>0x0, 0x6, 0x8db, 0xb8}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={r2, 0x4}, &(0x7f0000000200)=0x8)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980914})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000))

[  631.268292][T27714] binder_alloc: 27698: binder_alloc_buf size 72057594037927952 failed, no address space
19:54:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x80000001, 0x20000)
ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000140))
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000080))
syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x401, 0x1)
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x4, 0x8, 0x3, 0x7, 0x16, 0x2, 0x100, 0x10001, 0x3, 0x9})
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
socket(0x400000000010, 0x3, 0x0)
write(r0, &(0x7f00000003c0)="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", 0x593)

[  631.353018][T27714] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x4)
write$binfmt_elf32(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000003800000000000000000000000000e40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002be50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009f0982f040ea49a1f1b1a155d5107d41bf9df7d22c3ee8093250fb12d1846359a46c8ddb79045a15a9c256a9168730f706878620c78eed8c52949fa9b267ac5a"], 0x858)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:37 executing program 1:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x100000000, 0x8)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x121200, 0x0)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x5, 0x1)

19:54:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 2:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="2e0000002e008183ad5de0713c444d000600000010000340140000000000000037113e370000000000000000d1bd", 0x2e}], 0x1}, 0x0)

19:54:37 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  631.815216][    C0] net_ratelimit: 3 callbacks suppressed
[  631.815227][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:37 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x8000)
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000000c0)=0x2)
sendmmsg(r2, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003800)="c315077f03c37912cbeb4ab4f4de0935814c332c11f3762ee8e8c565e8194d1b23ce79e21e0e0bfa57cd50dc", 0x2c}], 0x1}}], 0x1, 0x0)
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0xa4b, 0x1f, 0x1})

[  631.919545][T27749] binder_alloc: 27739: binder_alloc_buf size 144115188075855888 failed, no address space
[  631.952304][T27749] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:37 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r0, 0x0)
connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e22, @empty}, 0xffffffe6)

[  631.969377][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  631.997166][T27755] binder_alloc: 27739: binder_alloc_buf size 144115188075855888 failed, no address space
[  632.014885][T27755] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:37 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:38 executing program 1:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
unshare(0x8000400)
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0)
r3 = mq_open(&(0x7f0000000200)='-$\x00', 0x6e93ebbbcc0884f1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r3, &(0x7f0000000040))
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00')
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={<r5=>0x0, 0x86, "cc1a00de6d94dcde1c7557122cacd6891968d6544092ba2966df187c3dd0cbfd6f2f00fa55b718f24a51d48bc2ccb456efd5c753d0b269e54070716596fd4a0591e09e259a7abda0266af2e5f0f1b0d0ae62cbee962145cfea2ec0d4fb195f8b0dfb988bce199824b80a1956dc79e58422628b39a25445c544d4faaa5d17b09f0c4c26dd50e7"}, &(0x7f0000000380)=0x8e)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r5, 0x48, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x5, @ipv4={[], [], @loopback}, 0x1}, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @local, 0x241}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}]}, &(0x7f0000000480)=0x10)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000080))
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000000c0), 0x4)

19:54:38 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000002c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000000)={{0x0, 0xffffffffffffffff}, {0x83, 0x203}, 0x0, 0x6, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]})

19:54:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:38 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x18b)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)

19:54:38 executing program 2:
r0 = socket$inet6(0xa, 0x100000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0xd}, 0x1c)
accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@empty, 0x4e22, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x20, 0x7f, r1, r2}, {0x1, 0x4, 0x3ff, 0x7, 0x100, 0x711, 0x29, 0x1}, {0x5, 0x6, 0x6, 0x4}, 0x7fff, 0x6e6bb7, 0x1, 0x1, 0x3, 0x3}, {{@in=@remote, 0x4d2, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x4, 0x3, 0x1, 0x6, 0xffffffffffffffff, 0x1000}}, 0xe8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2=0xe000000d}}, 0x1c)

19:54:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0)
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000046000000000000000000007c025aa5069d38160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3ae901d1700000000006431e50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000597ad02bb52023df24280c45dacae03a746760a3954b034523843ef059e8d6d1abef67134637d100868faf1c7dbf6d283903975c794b1e9bb4261b1adcf4ec51301b7cffadf79849a32bb0d97879ed0f6fd802df4c12b7dabbfa8e8d697bef5a8bc28040ce22a79c02488f5386f5dad074c2dcfb5b9887a843e0"], 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  632.720831][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:38 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$unix(0x1, 0x7, 0x0)
close(r1)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x62240, 0x0)
close(r0)
pipe(&(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='sy0\x00'], 0x8762c13b)
sync_file_range(r0, 0x1000, 0x401, 0x6)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x200700, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240))
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0))
openat$mixer(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x1, 0x0)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0x3, 0xfffffffffffffff7, 0xfff, 0x803, 0xd, 0x0, 0x0, 0x0, 0x8, 0x6f7f})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0xc)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="f334568c67131cf9c2e2cb54ed7eab6ff88b9647f21e263a0193142d25dd241f417c36270e127ad636572acf418cf25dc0cbc6697973cb83428a8af4c4b8783fc8ddd041f9e2cb6cf943c181db3fcc14e5056d19726973d16b67dc446fb6fdad5a5a42d6300874dca83b6c0398fd2aff5993408954113c21e884a17c5e349b7f2179462866c663567df37fc4b021b64527e377d9ae50d7bf45321c8ec35fd05cccb113c65c8a765b0929bb5c674366db5f6fc82dd0a22e2d252a9188b5c67b98fb4ec5b84b0f9e926515f8c2f4016c954d3817b9ba45c294de2ac24dbd3c28da2bd40396b56ddc3d14a23d638c95b38f40caa5e6188e0a45c6c10bbcb11a0bac18cbfe055a9deda99a73fa3b4b17dc6a08e3e6eb9708526126095f848471f2624e6ad245a89cdd7d70c20957060621ef55304b6a8f89fa058f2ee63ad3c5139e05aeaa6a26e656e53312aadbb4d91f4a04443116d1c3ba5936c6ee07e155a698e289f8c6fcd0b4e0c2d0b1cf71b70a5a39f319ab1525425d4d9d7fe710988782dbe25f68fb60e97633cfcbe5ae6ad0b29c7b3411c5d5f3d42fa596fbe079372ef1e38e08b2da38fe48e9436d27bbb0845b8090c094b2db0854361946c145c8b5db66eff802d64d975aa5a8fba394f80e65780ecd8377dfa9feb81df117cee4956bca98a6e6e127a0cfe64a709893877e3f2b41f50340ffa3a7491b56f65e43c5f8c1f18d5d17f523f0009a80de639c31aee366677f08e212b8964ab51cb0ed1f36fa6a0352c7e43f3bdb4b8339dc5ce12c001ea4937cf68471d36bd943206e903a69355988f7f85321a5c3e6ff842eb2055337330e28761c50b181dca8c00c127f5ad19829edbc7c3c011adb858cc49e2379d0eae4220bb573d6fdd6ac96d64bd76f1a27be8ffc79b5776dc07402f6484da24bd8dbc6e32c00bdc4909e27aa98906dbc2df39141ec17f026723aad8e1c345ffd007126aca366242db22325690bdf9e56c0c9098f8344c039b244ec4522481cf0440a3ef7361bfc2106303e141987aca07494e6cd5c9c7e7ccd13ce130c78e3a346f7bea06dd3ec750ecf69f0533053f29e7f799c09cc63a5839a5c3aa234c1efc1308c441b4e828950465afc977f739cb2761e9b4828b0593eb689453b574db32449155bc369fd2808c062b687b52f96d4126fba0b26af37f86ef6afaf5be0504ee7933cbe152c6275010a31477e035992d0fcd110904aeccdf3852a14f6654668a17c4fe3869c859e4d78ef1209f5be7987c2a07b787d2d03ddce862c7c23daa9b1b8958ca79cb2418588a1fbf6f80d72bf31ac163eab997969bd72aeddc1838df1aeea77b306f708c7e14570a62c26f9d125066e7417f39f6a2e80a2fff84a6ce60b67dd21c3a8494acc6e2104a884eba5f3b42a06e7e2d07100f0b194bbbe664987bafc0133795d464afd05f007ec56212fbce85616599dc980ee4cd4c01387505a82f03fe6aa66c96212160924b9f1977d239fc0f67d2ce43e6862108d401f2955c7990045a1700c9b1eb005eff4990570b62aaab46dc19c47e0f6b3f72499151112625442052d57b2bca8704c6eae65ddb72cbfafad41d99e3bdf2ae46ad89bb30f89a7dbff097de1a4600f6168992f85bc8bbed120bf7ba95a1b13279a52f57e46114fe35670244c5fc096b27c63a1a90bb6316b83b2c5b43aa74f2e2c1b9a364efcc8c087413975d0f108ae5aad7bae2b2779cee17d948c7f69e977170a1cdcdb7a4572eda036417a5712192008fce2841d558e841c4c4114bcc3508160b18820b5e8ca7780f71b99801e51e9b1f78b74d2ed28a5b40bd4673164ed075d7ccdd3220c84c97dc3338ccdea2b81dc91e0dec7b17898ee520e855b32fa68c3308fb43f9ce2fdae6af957ef0eb002d405f6b164187d13b53f20a79794a936eb58a6de89171fc23d2a8c9a114aa695a313b11adec5f9c69f8a9155f069600e9e3aaaf805ae48fff39bd536bb53c696e1f736fb373a0019b692c21cfcaec386b1ae8b482589e6dae02132310f4baafcacc1b0896cc186dbc567d4fbbba1e60064f6dd6821e394e085bcf7fbb8aba8c1fd176c47de46b58d7ac7648ac6574f17fb29cb91b1c3ff6d2ff5849f885fa8f09fccbc5853f87376cb6fbc6df67becc3d1c1916e2cba07cf09a5ee3c0bb5d0c340915e9f5e618143e13d69c97642a2dfda60e20328d8e5306c9551450e5e8ae6d883833c4839002433ab43d58bc6349767e8f8bdff8a59c2e3bbc12f8a03b7e50db7e5baba277eb26eaf5baaecabcc164b5cc0f3b39791da59ff3d25979e80ff571a148e35a070bd8bbe19d86fd25d2de6fe95a25ac56f608f029ca85f142251a51c5e4ab9fc2c74e4320437464994e6c036bed0fb7ddb712651b17322eca25d8b2264b6f2d9f7a876270228e5076f4311bed412deafc6b33278237c6c080f946642ae0a28d191d5b923f8d7269d15815cb026f5eeb946be0b5c6bc59a27bfe84681e6564f83e3bee8d84fa0b2b0f9fbe61d13cea7374fe39b17ce7d03a8f84f647bcd47a0983db995bedf958c3ae1ec5d76df5a681ee8c37d570e5bd1259d505a898b097cf6ba62c5f914ba2f85769502b55efd82ba27a15b75259be8a4e63d934a6d16128d0f760f24d07df3db84179796d79ba3859efeaa8948dbc93d947e0dd7d192e0db3c45e62e676e8a84a6de7b25ee379bb96aee81bf4ae6c39a5339bfc6dc5c54d35d5eb39e87f7da597de68135d19de79bfadbdede89f346f64b69ecb7e723e8799090b146f84908cb228db53201eecd129c35d303c213738b9d1357c3d9b3d8d775653ec4ce14e5cc16aecf103ab4b870d084718f59b42aed34f67893ab5e30efd3fc51cd7867745dad7197d2c90be0365ec3df1b0a5fec5caca6bc96a7808f2d12144b6f138a1feaa85c4642e4ee2b3478c2768cb9984034fbde03c9bdbea11dab638ae2e1d5b2203c997a261a3dcd7c64e9574a989d19d8751562bf0db2f5f531f31118e21c16d468b7fe24b899d01a5c191bfe61db33c39ec5a8f53636fc25c97f3c1452bf1e6c1d6fdfefdafa6ac50ca9db377476cd146b7f61fe6236719cde9e99c494d5acf831bb22b783dbe7ad95401974ce12fa913e8b9e66f08bc4654e688a3989769f130c97c6acaa9bba7954ea90ee6c90e888ca79a8c9c0368e3ed027f3ecdc31e5d0b98411ec65337848380468da6c2d29081ebcca2d5bf4b0e5e5b5b675c69ffdbfd3f42d3764a7dc0b61fa4e02419a5316ba3994fc88bce5d7ded4ebe144ef675ca0be6490a9852f56e1458d6feb80922e7f0f9ef44c0cbfbc0a32e56e63df3556b6588e2abfac78e7dcb6bff6a87cfc7209831a607d69c0b13a4dc2a7eb4a4e12d35c33758eb5e944d9cc0ae095e6c50f24cc33cb6c59320dd3f2d7fb93ed1614b0fb3b884f9e54e5e846d74b6f24e5bcbc77f96af957f02427d1a2f0f1a3fb43a96e34c0fce4f1993e3913bf607d7a9335c5058fcd9669f624a564e9f2c1ed7fa8d622750293106364f9f2d31552b434921a6e973e8b76f6bf3a19f85df6148e67469f97015cf0f82c51e73ed39fcc390a784bed49b906d5a6eba3f0d24787a7efa0f19bcb4290aac0c49440690d954828bfab155a4c206d9c1240464b496676a46f6c95ea55ce810cb2d8aef5b77b046ff7813d43815da4bc1f0a5b84d14ca8dd4e20d9a9057d90417cc13e228ecc6a4d2eeb3a89ef9c4be42d84385e1cd9aae3a055e46c5da01e751a68cc06d7a7fbb990f2daf51de3fc59243b1e6ab4d16d6c6b0f17ba988daacf4a7e9093d42211f3b3c5f946f1bc00487329b82021452156379e13a8c7d3550e7f1c3a8d0a7c71580c2e4273f2d9228c4f51f6db7751e34b34e9be299db0c60f40a3c5c525858b4451cb59abfeb8d9e3a00d449234bfd1a3710a4892a95083a09a718d6e2b0b800dc94501ce72f8ce96c5157c148097fdf52c30cfc930679c15c05f7102cdd9c6328d07e1278fa8df134afd1db70820a2e0ee6b56b015c675582d01add634d130f04d392ccc79939ea9009fb4dfdb87358981e3e771bcc995a924fa7789adda6b64a87c7bce59ea6246f8f188de204da05e7a664fe265fbfd46322fc5d2b23393e4789cdea052347ff360fcacbc6e3347b91d219c602474c442e793279efce3507d0a605b24795498ddb5b9e270c92bd86982de85a6bfd898b7086ad1351d934ea570971b7d68780ea2d0270784dc1d4fcd8b81bcf75c37b2ef972fe7dca08676b07e0055175bab84b8e63b37b2db3a358780d91bf700e3a120baeb7c6978f17b499cdc04a083ce7855428b62316a6eb5ee428a41e6bf0b3608aa8476f98f13cdc2fabcfe6532278c4179aa5133ef4c829c5503097538f30cd8051e136f6b3cb2bd4e86aae1270b86af71265ea3ebc239778fe43a89bc72c0ef903e7254ab1492aed46f2da0779170804d14ccbe1054c90b564347be5e04ab26da395b957469755f0a90c09c03d3980f87797b0e3828d703500e86336fd34131cc0ef2633872a33e3a5b651ebdc930e44c4217f9eba5c09f9de40960a10a96159ef4dc713c33780755bc6774420bbdc53b40c8ed0ec777eefb5504781d87ed290b9d2edf2bd7d6e0c06676dada5990d72bb5999cad0ef2e1bf96baeda5067bce3677cf0cd4ed2de94c7a200cb4002c144a730b9eae9947b3e7b084cb73d8dcf8717c186daedbc7c11c84fd33bfe298865aa060ee4b725f01acb9e59c15f937cce53f6f77b97b90d367aeaf072d12d6ace64ab1482e3ce023c797185432aaac2120ff9589af6bd002bc90b2ad828a0885050c52f2eca909bfdea3395e0813a630e0be169997d7875612386bd7673d17f624f7f064b6164964cb6140d563782bc6103450afe06918253d7dda00c70d7d41d081eecdeb6dfb242221cc21e8537354dfc4ccc5d3560a681b18b2624b03508e0626d2fcbedc92f36da59fcd704051eff501137b21a2acef8bd9f556ad9c7b4d25b7599c127391f4015cc69b4e9f9b786b52549680fe8bfd411aba34423ee3318719e79837ad57afc7d220dfe54cb8347f1ba82831fd3fb84a032eed43827aad1f7801f58bfda85342d97b5a6b72d22fb5417c0074c122dd0102d0414799b11e081df24bb1ef0311ad83a6afeace32919862b32939aa867d00cc379b22abffeeac8331fff8645a128cfd7672b9b993b30a7c05e106b96c047bdc086c85945520da31f206e51973dd591bada3ca73161d1438675ba068d397ea764267e1e9279dec6fd83b7219e0a8097807967287fd0e7f42d599e27d1cd0944fc243b258d3c069ab82dc1a9c6161ac62d71167f72a2bc762bc4665343c9d832e42a2a00850d86971104ca4f8a6fdfe120d642aeece475c171b920eb6b1cc4f667a84657e84e8ba834c3f3b419d28e24b7b5c3ed8538125648a24ccafb4ad6c2f4663eba211f4744809b6f0a9eb3a0d4f7b4b7530ab854a4d582dcc61de68b9b9b355b3fc4afde54ede2a0f67a3e174bcf07647c368e895d829c738ded8508bce8f5ab017e37d04a40162c3805e6d2d8497ab73ffa3706bc5f1dfdabf25779789313654513fed536b6a505365ba18be61791e65bd613b604aa9ab8276eddb8c0823dbb6a120fc67c5809698818c9b2f03ca75128d0a489c81f887a7431c9d39bc2589217b0d021bd235c143eb3cfa73cdadcb575988b37f80451ab4a2f3749918393e4e7fed4e22b8c6725dae9808fec304a51bcccf610cb921f0b5bc1de37bd912d472a7309ec94ae507000adbd4ee1b8762d7d8d363ac86481f9546", 0x1000}], 0x1, 0x0)

[  632.782202][T27785] binder_transaction: 52 callbacks suppressed
[  632.782221][T27785] binder: 27784:27785 transaction failed 29189/-22, size 0-288230376151711744 line 2995
[  632.857550][T27794] binder: 27788:27794 transaction failed 29201/-22, size 0-0 line 3211
19:54:38 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20200, 0x0)
ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000a40)=0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x449, 0x220000)
ioctl$FIONREAD(r3, 0x541b, &(0x7f00000000c0))
listen(r2, 0x0)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0xffffffffffffffe6)
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000200)="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")
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a3828e997dc000000000000000000000000000000000000000000000000000000000000000000000000000000002c4cc9ca00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f903264b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0bfdd8f80e6aa60e14452d47addd13922f8f1b7aee15cff280a4469335375b2cf50a7191b28fcae1b7df28a1bda975e2c096ddf467b587a54c35714293470eb853ed2158eacf4b27603c3e891313caade2b629ca10e5222c61503fe39ea9afc344361d1e1b7e0356969a1fa7feaf7ead3cff50e27797675e793fe"], 0xffffffffffffffc9)
sendto$inet6(r1, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  632.900583][T27797] binder_alloc: 27788: binder_alloc_buf size 288230376151711760 failed, no address space
19:54:38 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\xfe\xff\xff\a\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, 'teql0\x00', 'veth1\x00', 'yam0\x00', 'ipddp0\x00', @local, [], @empty, [], 0xb0, 0xb0, 0xe0, [@quota={'quota\x00', 0x18, {{0x2}}}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x1e8)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4a0, 0x1)
r2 = getpid()
fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getgid()
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000006c0)={r0, 0x0, 0x1, 0x8, 0x8})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={<r5=>0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)='\x00'}, 0x30)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000540)=0xe8)
getgroups(0x6, &(0x7f0000000580)=[0xee01, 0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xee00])
sendmmsg$unix(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="5d01661ad02515d0d3fd267c6dd177ae74fac502f00b63591954ab0b", 0x1c}], 0x1, &(0x7f00000005c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xa0, 0x20000000}], 0x1, 0x4000000)

[  632.945781][T27797] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  632.962897][T27799] binder: 27788:27799 transaction failed 29201/-22, size 0-0 line 3211
[  632.979557][T27797] binder: 27784:27797 transaction failed 29201/-28, size 0-288230376151711744 line 3148
[  633.004007][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, &(0x7f0000000180)="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", 0x1000, 0x4000, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x18b)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0)

19:54:38 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:39 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5", 0x4)
sendmmsg$unix(r1, &(0x7f0000001300), 0x8d9, 0x20000000)

[  633.189687][T27815] binder: 27812:27815 transaction failed 29201/-22, size 0-0 line 3211
[  633.214503][T27817] binder_alloc: 27812: binder_alloc_buf size 360287970189639696 failed, no address space
[  633.220469][ T7967] binder_release_work: 54 callbacks suppressed
[  633.220519][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  633.251185][T27815] binder: BINDER_SET_CONTEXT_MGR already set
[  633.265452][T27815] binder: 27812:27815 ioctl 40046207 0 returned -16
[  633.265587][T27820] binder: 27812:27820 transaction failed 29189/-22, size 0-0 line 2995
[  633.286302][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  633.303210][T27817] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  633.353681][T27817] binder: 27816:27817 transaction failed 29201/-28, size 0-360287970189639680 line 3148
19:54:39 executing program 2:
futex(0x0, 0x0, 0x4, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="158a00a78b0c44e5d5810a85b909486b7c7aef6bbacbb042f08398d4b0a6f8057ffd6cdc9743716aff46c568410310a3b0"], 0x31)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000001e00)='./bus\x00')
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
sched_setattr(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0)
creat(&(0x7f0000000100)='./file1\x00', 0x0)
utimensat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}, {0x0, 0x7530}}, 0x0)

19:54:39 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f00000007c0)='/dev/dmmidi#\x00', 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f0000000b00)={&(0x7f0000000800)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x2}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000840)="b60c394a29ad97a1db2350cb246a5fabbf1c150c3dc8b278e3f4b46c25da504ba4476e4a7542799b0d74cdb36435799a53a79dea71defc8c4277cb719d208fb9973e117d8ed39b7fa8d9b1414f95a2138b69f64768cc07395c586080722299b355ef4129fdee50e3b181cbccd7a92e45753407cb50448dc2b8510c456ddc63163d0174bb8a881037069fa3", 0x8b}, {&(0x7f0000000900)="7a709ddd076dee3dd9f14c3ee95e2c7b981bcca5791876463ded413ab7ba7802df3dacca03eb3adb739e7e199b57a126134393b448d1542429932bd1f1e02da2ce79364f59e4a34c40bc932245f944fb6f1f9138df5becd09093453e2e8af66e", 0x60}, {&(0x7f0000000980)="fd8a07d3864585", 0x7}, {&(0x7f00000009c0)="b24a0ac822e86868f8e3950887bb4efc8f606a8b8b969b19412efeb69c65b385b4ef567079e591b668a0799fd9178b099eab05e4e5bef483a6a5", 0x3a}], 0x4, &(0x7f0000000a40)="c147d2b2e230155ab1e991330b001f875d873e987e7f1c955911ecaa8bf37cfa2f85a4f4f09c5a6b4efbb8b42c5aa05fcc0550da92b85e9c0456974d554a668d62574f3e7ca1b97af93c6ec048100bfadb937bfa45ac3751831c29ecc5b3f7cf1e4d25c7fff0eba67b0bd91df33e2a8622dd6a322833e875852efb32a898a087640ae92adcea3f9f929f9b6b0d294b1f37fad5e0600e234628ea747b143ac7c30d3068364aaa1e0a71b9807e4fc6d9d964d99458b182583af6f2e566e90d", 0xbe}, 0x4040)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = add_key(&(0x7f0000000cc0)='syzkaller\x00', &(0x7f0000000d00)={'syz', 0x3}, &(0x7f0000000d40)="d8c8b0bb47fb11dea8bd58401317c3c3050ff1cd4efdb30f682ca3d74f7ada9fc5303422887c8d98cdb10642dad06586fb4de4654f047c67eebceb51d3a7a1f6864b6180919f9e231b9edb97a68ae42b924845a272a350454357680c2fd37f72cd9d27efc45e42e5ca7f1f5840356eed964143e672b2a1f36040506e3f030ba586afe787a0d14310d23950de928125feea007fce81ed2deafab12041bbc99eb1e32f0f109c5029b1f4a95f7eae19222dc89eb5cd71a54aa9", 0xb8, 0xfffffffffffffffc)
add_key(&(0x7f0000000b40)='id_legacy\x00', &(0x7f0000000b80)={'syz', 0x2}, &(0x7f0000000c40)="a50b4eccd9c6f058db5b15bb85b716f46118e3ae4cbcd55382c54c319b8afe43766201abfc87445bd0815f9dbb6a127b549cc274a6242c9a83e7a34f8cccdc88d8b6af2ce9838b49225231e29358215f74a75df0e0f9d0e19d2c7c68", 0x5c, r1)
ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000e00)={{0x2, @name="5525548d57c47dca505477a000c58b6688377de2442a788d2f4efc8134e919ac"}, "5e34119b59b1151e38f005cabc30a777ae5e7bc7cf40e4d03bb1831a5fb48c80", 0x1})
r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)="10d2fb72ddad787b7df9f6c607603efe357eb5689682418cb4bfbc8622eee0fb51644287d501c3960c04ac1187b1767d0c1c00f312c14dbd4ffb12224bf2d8fc2bb860f80e6b115faa11105b785575f6290eda7dcf2ee9f71387e6dff5f9fc025a1759f826b7d9345d94d4f5e0e89a88b84cf436a3bfa36663634decdb8159e73a3f845f8e0fe69bf256ca7c7dfe", 0x8e, 0xfffffffffffffffb)
keyctl$instantiate(0xc, r2, &(0x7f0000000000)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0x2d, 0xfffffffffffffffd)
r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x600)
add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000700)={'syz', 0x2}, &(0x7f0000000740)="63e76061e5d49880d24dd880b8e03a88bfe70f0395362baabf169d2fe25e77551d084f913a69279aab7a981cd1b64e5f6d86e91a64b9060afc3dae8f9e0effcaee6d0c19a5964a8acfd5714535a7ed1fd7b18710ad3030c8da12cd285a0aad03a6efc4baa8dc3759ac13b001cc9ac8", 0x6f, 0xfffffffffffffffa)
write$uinput_user_dev(r3, &(0x7f0000000280)={'syz0\x00', {0x101, 0x3f, 0x5, 0x3}, 0x11, [0x5, 0x0, 0xfffffffffffff00c, 0x33c4, 0xd2f4, 0x8, 0x96, 0x4, 0xffffffffffffffea, 0xa96, 0x93, 0x20, 0x6, 0x5, 0x3, 0x5, 0x6, 0x7, 0x4, 0x3, 0x7ff, 0xffffffffffff7fff, 0x2e7, 0x142, 0x7, 0x1, 0x4, 0x8001, 0xfffffffffffff001, 0x12b, 0xfffffffffffffff8, 0x100000000, 0x1, 0x8cf, 0x6, 0x8, 0x7, 0x0, 0x3, 0x66, 0x1, 0x1000, 0x9, 0x401, 0x3ff, 0x1000, 0x7ff, 0x0, 0x80, 0x7, 0x8, 0xfffffffffffffffc, 0x8, 0x20867acf, 0x2, 0x100000000, 0x800000, 0xff, 0x7fff, 0x1000, 0x3, 0x9, 0x3, 0xf0], [0x3, 0x1f, 0xef, 0xe1e, 0x8001, 0x4, 0x2, 0x5, 0x4, 0x3, 0x4, 0x4, 0x0, 0x5, 0x6, 0x8, 0x44e3, 0x3, 0x7a, 0xeb41, 0x1, 0x800, 0xae, 0x9, 0x1, 0x81, 0x101, 0x740, 0x7, 0x5, 0x7ff, 0x9, 0x3ff, 0x2, 0x7, 0x6, 0x100, 0x5, 0x1, 0x4, 0x3ff, 0x0, 0xd9, 0x6, 0x9, 0x0, 0x200000000000000, 0x3ff8000000000, 0x91, 0x3, 0x0, 0x7fff, 0xfff, 0xde0b, 0xffffffffffffffc8, 0x1ff, 0x8, 0x296b, 0x7, 0x45, 0x9, 0xfff, 0x2c, 0x1896], [0x5, 0x0, 0x1000, 0x7, 0xe878, 0x400, 0x2, 0x6, 0x3ff, 0x4, 0x4, 0x5, 0x80000000, 0x5, 0x4, 0x5, 0x100000000, 0x9, 0x8b, 0x8, 0x1f, 0x7fffffff, 0x6, 0x9, 0x9, 0xfffffffffffff801, 0x1ff, 0x4, 0x480000000000, 0x5, 0x8, 0x7, 0x0, 0x3, 0x682, 0x0, 0xced9, 0x7, 0x4, 0x101, 0x800, 0x6, 0x7, 0x7, 0x6, 0x530f, 0x17358c12, 0xa708, 0xbdf, 0x2, 0x8, 0xb11, 0x9000000, 0x80, 0x80000001, 0x7a0, 0xffffffffffffdbd7, 0x4, 0x7fff, 0xffffffff, 0xa70, 0x7, 0x5, 0xffff], [0x6, 0x3f, 0xb497, 0x800, 0x9, 0xd4c0, 0x1426, 0x8001, 0x800, 0x7, 0x8, 0x3, 0x20, 0x401, 0x7f, 0x3, 0x0, 0x5, 0x8000, 0x9, 0x7, 0xfffffffffffffe01, 0x100, 0x100, 0xffffffff8631684c, 0x100, 0x400, 0x80, 0x20, 0x3b, 0x1f, 0x4, 0x8000800, 0x2, 0x9, 0xfffffffffffffffc, 0x5, 0x0, 0x259988a0, 0x200, 0x9, 0x0, 0x0, 0x2e1, 0x1, 0x7f, 0x101, 0x2, 0x7, 0x0, 0xfffffffffffffffc, 0x7, 0x100, 0x800, 0x7, 0x7ff, 0x1, 0x6, 0x3450, 0x5, 0x8, 0x401, 0x8, 0x2]}, 0x45c)
add_key(&(0x7f0000000140)='encryp\xf4ed\x00', &(0x7f0000000180)={'.yz'}, &(0x7f0000000bc0)="453f77519ada12679e314d4dd682e06a71e95686d778e99450e7d62f827fbc61b7ddf6f8dad34882343b4b367ac48a4939fb7cab48086516e9fa89d798fc093629cfa43a9a41", 0x46, 0xfffffffffffffffe)

[  633.497990][T27824] binder: 27823:27824 transaction failed 29201/-22, size 0-0 line 3211
[  633.526377][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  633.533265][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  633.535462][T27830] binder: 27816:27830 transaction failed 29189/-22, size 0-360287970189639680 line 2995
[  633.551819][T27828] binder: 27823:27828 transaction failed 29189/-22, size 0-0 line 2995
[  633.559472][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  633.604434][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:39 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0)
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:39 executing program 1:
socket$kcm(0x10, 0xa, 0x10)

19:54:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  633.786140][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  633.823431][T27841] binder_transaction: 20 callbacks suppressed
[  633.823443][T27841] binder: 27840:27841 got transaction with unaligned buffers size, 12
19:54:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x8, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x7, 0x8001, "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", 0x33, 0x5, 0x3, 0x3, 0x20, 0x4b3000000, 0x8, 0x1}, r3}}, 0x120)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000400))
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0xffffff4a)
write$binfmt_elf32(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b707bc95cacd231dafe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1ae959f44a73f32a928000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/2146], 0x858)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000003c0))
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)
r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x100000000, 0x101, 0x2, 0x4eb9}]})

19:54:39 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:39 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x17, 0x4, 0x7, 0x1, r0, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x3c)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84000)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x2, 0x8, 0x100000001, 0x8}, 'syz0\x00', 0x37})

[  633.890081][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  633.898708][T27841] binder: BINDER_SET_CONTEXT_MGR already set
[  633.958914][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  633.965623][T27841] binder: 27840:27841 ioctl 40046207 0 returned -16
[  633.998019][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  634.013444][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:54:39 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:39 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:39 executing program 1:
r0 = socket$inet6(0xa, 0x5, 0x3ff)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000003c0)=0x200000000003, 0x3)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x11, 0x401, 0x8, "146d6b5c51b0d00b5f11a1ab1f321822d7"})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x3e, 0x0)
setresuid(0x0, 0xee01, 0x0)
write$nbd(r4, &(0x7f0000000080)={0x6000000, 0x0, 0x0, 0x0, 0x5, "a3ef41749fa527ab78fc57f180bd82099cbab35a2fdbede5fbb11bedfb1f8cd557b0bdfcd7f42f63af872a0a11e32f7a0eb6bb02f6b78b1ea580f6ba185947306a84c6c5e7be78ab9406a3ea21ad8514d024cacb80e3ba56"}, 0x68)
lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x7}, {0x1, 0x5}], r3}, 0x18, 0x1)
r5 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000180)="d083dbfb27c3718cc474c2362728752873b33d5f62da0e44888f08614302ada2f12ad0ebe1577f0d539bbe5248eaea34f1fe867b9220c79707aed844bac20accb2f9835798c49c0f66b1e5675721c37ae868790b09feabbcef8d8d33eda9d3a72c665c65ee6f4d38197b99b0d2dd8d3d7c9ce101ddfbab78cd34cd68887511199b9078fd634f04b42209b2e5dcfbd40256060bbfc97fafb5a789f48ce3a31e4d98", 0xa1, 0xfffffffffffffffd)
keyctl$set_timeout(0xf, r5, 0x0)
listen(r0, 0x3)
listen(r1, 0x7ff)

19:54:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x280100)
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000000c0)={0x7, 0x10000, 0x8, 0x101})
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f0000000a40)="ccbdea4782b2ca47a2bd0ac56e6d47a23879f76d17a6594b7273ecd7e0733fe01408a4e1054b1a82a2e63bab868f2baf2e2561609703af1d8695a5936f14c67a40b0ba7a090d4df2dc076053edb7e01694f1cadcfa4095f9d34ef392caef6388a1f2919c5b0e5e177e6210d23eb81da5679c6866858fe6b3cacbb2b20aa0d90415eab55895afb40d3e89f3cb29f12a04ae189a8a004fb9c478e843a07e9df4a3", 0xa0, 0x0, 0x0, 0x0)

[  634.239908][T27863] binder: 27858:27863 got transaction with unaligned buffers size, 12
[  634.258255][T27863] binder: BINDER_SET_CONTEXT_MGR already set
[  634.268787][T27863] binder: 27858:27863 ioctl 40046207 0 returned -16
[  634.316443][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  634.371719][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:40 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x2000)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8)
setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}, 0x14)
ioctl$TCFLSH(r0, 0x5405, 0x71dffb)

19:54:40 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:40 executing program 1:
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmod(r0, 0x8)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x5}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000014c0)=[{0x70, 0x13f, 0x2, "5419b0b66bf59294ed115ea9414079797c22d15bbe98a9c113e09fae67fe4152fd1c93e553fe90e65627feed8359e24880d9ccadb5bbe15455c68c335fd3997e9744f9037579203505e24c259a776d4b2ca09ff26897ce0819888a79ef"}, {0x78, 0x110, 0xffffffff, "c397cb4f54eec73fb90e29936268a8cd7b88f770961d722f0f9ba4d111c773c45ae83fabcac58786523cee53859da5c977b5f51a989d308ba6d0973cb6fda5d874a586b7ebbd22c75cb570d3afdea7bddc1fe436cb23c223d77e7d8143a0a8b897"}, {0xb0, 0x0, 0x1, "1f698cd463ab4fe90980353a6ca820c147f148b9103b5bdde19eb715e51bab93d5a9b2a3a8c586e5cfe281d6391bc0969669f50a0b3f4a17fddcfc52f1b3505358b2a2ddcbe1f4cecab07aa5823a6369868fff471fa9f6bc0953e96723ca27dd61d140f39d4348ffe79fbd0634dd6f434a59722a7e177c7d3bb5a61311f9e171533e8c05818178078fee17c547582c8420ac46035620500472bf6aed86001afd"}], 0x198}, 0x0)

19:54:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:40 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, 0x0)
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e1d, 0x0, @rand_addr, 0x7}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xfffffffffffffdd2)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f227943000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007dba4365bb29090000000000000000"], 0x858)
restart_syscall()
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:40 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x80000001, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x34324d59, 0x0, 0x0, 0x0, @stepwise})
write(r0, &(0x7f0000000000)="6d82b3f9c04f113ee2ae90c44f12fcbe85f1217b6b8096d0c4fc9c9a12064e5f24736d26989746fe400c66c10a91f4720fc4ac69bc4f4223f68bca20a93d8b932d48ae3ddbc16495fa59aafe8311088cbe76a79865361ce68e", 0x59)
clock_gettime(0x0, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x25888a6d, 0x2, 0x4, 0x4000000, {r1, r2/1000+10000}, {0x7, 0x0, 0x2, 0x5337eef1, 0x9, 0xffffffffffffffbd}, 0x100000002, 0x3, @userptr=0xfffffffffffffffa, 0x4})
syz_extract_tcp_res(&(0x7f0000000180), 0x1f, 0x6)

19:54:40 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:40 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  634.674514][T27885] binder: 27883:27885 got transaction with unaligned buffers size, 12
19:54:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr, 0x800000000}, 0x1c)
setresgid(0x0, 0xee00, 0x0)
setgroups(0x0, 0x0)
setresuid(0x0, 0xfffe, 0xffffffffffffffff)
semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9fcc, 0x10000)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000000c0)=0x5, 0x4)

19:54:40 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x84001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x0)
r3 = epoll_create1(0x0)
r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x103001, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000100)={0x0, @reserved})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r2})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000))
write$eventfd(r2, &(0x7f00000007c0), 0x8)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)

[  634.746417][T27896] binder: 27883:27896 got transaction with unaligned buffers size, 12
19:54:40 executing program 1:
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)=@nfc, 0x80, &(0x7f0000000000)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000280)=""/240, 0xd932}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x11)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fchmod(r0, 0x8)
sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x2a0, 0x0, 0x0, 0x4000]}, 0x5}, 0x80, &(0x7f0000000340), 0x0, &(0x7f00000014c0)=[{0x70, 0x13f, 0x2, "5419b0b66bf59294ed115ea9414079797c22d15bbe98a9c113e09fae67fe4152fd1c93e553fe90e65627feed8359e24880d9ccadb5bbe15455c68c335fd3997e9744f9037579203505e24c259a776d4b2ca09ff26897ce0819888a79ef"}, {0x78, 0x110, 0xffffffff, "c397cb4f54eec73fb90e29936268a8cd7b88f770961d722f0f9ba4d111c773c45ae83fabcac58786523cee53859da5c977b5f51a989d308ba6d0973cb6fda5d874a586b7ebbd22c75cb570d3afdea7bddc1fe436cb23c223d77e7d8143a0a8b897"}, {0xb0, 0x0, 0x1, "1f698cd463ab4fe90980353a6ca820c147f148b9103b5bdde19eb715e51bab93d5a9b2a3a8c586e5cfe281d6391bc0969669f50a0b3f4a17fddcfc52f1b3505358b2a2ddcbe1f4cecab07aa5823a6369868fff471fa9f6bc0953e96723ca27dd61d140f39d4348ffe79fbd0634dd6f434a59722a7e177c7d3bb5a61311f9e171533e8c05818178078fee17c547582c8420ac46035620500472bf6aed86001afd"}], 0x198}, 0x0)

[  634.804597][T27898] binder_alloc: 27883: binder_alloc_buf size 5188146770730811408 failed, no address space
19:54:40 executing program 2:
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x3)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8)
getsockname(r1, &(0x7f0000000180)=@xdp={0x2c, 0x0, <r5=>0x0}, &(0x7f0000000280)=0x80)
getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000300)={@broadcast, @dev, <r6=>0x0}, &(0x7f0000000340)=0xc)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001f40)={<r7=>0x0, @initdev}, &(0x7f0000001f80)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002080)={'team0\x00', <r8=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000002840)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000002940)=0xe8)
getpeername$packet(r1, &(0x7f0000002a40)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002a80)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002ac0)={{{@in6=@ipv4={[], [], @initdev}, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000002bc0)=0xe8)
getsockname$packet(r1, &(0x7f0000006700)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006740)=0x14)
getpeername$packet(r1, &(0x7f0000006780)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000067c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006800)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000006900)=0xe8)
accept4$packet(r2, &(0x7f0000006940)={0x11, 0x0, <r15=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006980)=0x14, 0x80000)
getsockname$packet(r2, &(0x7f0000009040)={0x11, 0x0, <r16=>0x0}, &(0x7f0000009080)=0x14)
getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000090c0)={@mcast1, <r17=>0x0}, &(0x7f0000009100)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f000000a500)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f000000a600)=0xe8)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f000000a640)={'bcsf0\x00', <r19=>0x0})
getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f000000a680)={@rand_addr, <r20=>0x0}, &(0x7f000000a6c0)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f000000a700)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f000000a800)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000000a900)={'vcan0\x00', <r22=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000a940)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f000000aa40)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f000000aa80)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r24=>0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f000000ab80)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f000000abc0)={{{@in=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r25=>0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f000000acc0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f000000ad00)={'vcan0\x00', <r26=>0x0})
getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f000000b4c0)={@local, <r27=>0x0}, &(0x7f000000b500)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f000000b540)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r28=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f000000b640)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f000000be80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f000000be40)={&(0x7f000000b680)={0x790, r3, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0xbc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x66}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r8}, {0x1b8, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x354f, 0x7, 0x40, 0x2}, {0x53cf9d89, 0x9, 0x0, 0x17}, {0x2, 0x5, 0x5, 0x80000000}, {0xffffffff, 0x4, 0x200, 0x3b}]}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x174, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x7f, 0x8, 0x4b, 0x2}, {0x28, 0x7, 0x7, 0x5}, {0x9, 0x400, 0x6, 0xfff}, {0x7fffffff, 0xfffffffffffffffc, 0x1, 0x101}, {0x1, 0x5, 0x7, 0xf7c}, {0x6, 0x0, 0xc418000000, 0x1}, {0x1, 0x10001, 0x4, 0x4}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r18}}}]}}, {{0x8, 0x1, r19}, {0x4}}, {{0x8, 0x1, r20}, {0x98, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0x90, 0x2, 0x6}, {0x4, 0x5, 0x100, 0xaa}, {0x100000000, 0x0, 0x1ff, 0xfffffffffffffe01}, {0x80, 0x4, 0xff, 0xe241}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1d256d6d}}, {0x8}}}]}}, {{0x8, 0x1, r21}, {0x1b8, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r23}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r24}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r27}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}]}}]}, 0x790}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)

[  634.890341][T27898] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
[  634.923344][T27911] binder_alloc: 27883: binder_alloc_buf size 5188146770730811408 failed, no address space
19:54:40 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20880, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000080)={<r1=>0x0, 0x7f25}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0xfffffffffffffffa}}}, &(0x7f0000000200)=0x84)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000240))
ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x0, 0xfffffffffffffff8})

19:54:40 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  634.942990][T27911] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:40 executing program 1:
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f00000000c0)={{0x2c, @dev={0xac, 0x14, 0x14, 0x29}, 0x4e22, 0x3, 'wrr\x00', 0x4, 0x80000001, 0x21}, {@remote, 0x4e22, 0x1, 0xffff, 0xfffffffffffffff8, 0xb4ca}}, 0x44)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x2cf0000000000, &(0x7f0000000180)=0x2)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'L-', 0xe8f}, 0x28, 0x3)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)}})
socket$isdn_base(0x22, 0x3, 0x0)

[  635.113813][T27918] binder: 27917:27918 got transaction with unaligned buffers size, 12
[  635.160866][T27918] binder: BINDER_SET_CONTEXT_MGR already set
[  635.196186][T27918] binder: 27917:27918 ioctl 40046207 0 returned -16
19:54:41 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:41 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
io_setup(0x9e4, &(0x7f0000000040)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r2=>0x0, <r3=>0x0})
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000001c0)=0x4, 0x4)
io_getevents(r1, 0x5, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000180)={r2, r3+10000000})
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="17ff01008b2bdcf16b5b1710f3694adf39000e8d874000", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r4, &(0x7f00000040c0), 0x1000)
read$FUSE(r4, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r4, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

19:54:41 executing program 1:
r0 = socket$inet6(0xa, 0x40000000003, 0x3)
setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f00000003c0)=0x3fa, 0x1e4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$inet6(0xa, 0x1, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000000c0)={0x1})
fallocate(r1, 0x10, 0x80000000, 0x6)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffffffffeff, @remote, 0xfffffffffffffff6}, 0x1c)
listen(r0, 0x3)

19:54:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  635.413399][T27927] binder: 27925:27927 got transaction with unaligned buffers size, 12
[  635.460587][T27938] binder: 27925:27938 got transaction with unaligned buffers size, 12
19:54:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r2 = dup3(r1, r0, 0x80000)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000000)=0xff, 0x4)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

19:54:41 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:41 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8)
socket$rds(0x15, 0x5, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0xff}, 0x0, @in=@dev}}, 0xe8)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x20002, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x8, 0x4, 0x2, 0xffd, r2}, &(0x7f00000002c0)=0x10)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x400, 0x0)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40, 0x0)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x62, 0x2)

19:54:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:41 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={0x5}, &(0x7f0000000080), 0x8)
ioctl(r0, 0x1000008952, &(0x7f0000000040)="0adc1f0c3c123f319bd070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x600000000000000, [0xc0000103, 0x0, 0x1b], [0xc2]})

19:54:41 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  635.694517][T27953] binder: 27944:27953 got transaction with unaligned buffers size, 12
[  635.704919][T27955] binder_alloc: 27944: binder_alloc_buf size 7493989779944505360 failed, no address space
19:54:41 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:41 executing program 1:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x20042, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={<r2=>0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000280)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000002c0)={r2, r3})
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2000, 0x105084)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0)
r5 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000380)={0x43, 0x9, 0x2, {0x3, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x5, 0x1}}, 0x43)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5)
sendfile(r1, r4, 0x0, 0x102000002)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0)

[  635.767710][T27955] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
19:54:41 executing program 3:
getresuid(&(0x7f00000000c0)=<r0=>0x0, &(0x7f0000000140), &(0x7f0000000a40))
quotactl(0x0, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000a80)="90e8272455f38b7a1cc9aac89a82d145afe096c517ba1da16f4cf2c81afed90eab1c7f884cc8e03686b959836e964faadb7323aece043d33")
r1 = syz_open_dev$media(&(0x7f0000000c40)='/dev/media#\x00', 0x9, 0x2001)
ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0xc2)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000ac0)='cgroup.subtree_control\x00', 0x2, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000b00))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/capi/capi20\x00', 0x100, 0x0)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000d00))
setsockopt$inet_MCAST_LEAVE_GROUP(r5, 0x0, 0x2d, &(0x7f0000000b80)={0xfffffffffffffffb, {{0x2, 0x4e22, @loopback}}}, 0x88)
listen(r4, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
fstat(r5, &(0x7f0000000c80))
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000038000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/2136], 0x858)
sendto$inet6(r3, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  635.829413][T27961] binder: 27944:27961 got transaction with unaligned buffers size, 12
19:54:41 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:41 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000180)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100), 0x28)
write$binfmt_elf32(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", [[], [], [], [], [], [], [], []]}, 0x858)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x12b080)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="3f5861ac43a413e51e0a410cd785d426", 0x10)
sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8)

[  636.115940][T27976] binder: 27973:27976 got transaction with unaligned buffers size, 12
[  636.252122][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
19:54:42 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  636.322247][T27976] binder: BINDER_SET_CONTEXT_MGR already set
19:54:42 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="e60000003599cb62f02f098f160e9d1211e15fb7c326df53faa059c07334904893d1e97af674bd992ead3c7650c74f158f6750e2e3915711724bab83c41427e802547942fd649227e1cbf4815ab990470140637e5da7f5f444655bbe39ec92247c835fdf595bf02c810c95594ce7672945fcbbadfdf7567bde3d9532eada2fbdfef0c8d5a3bc5acbf52311ea1bd15b6919a7b28d06ecba7e5b4b072da4e65f3f39853beb23c01a220283886ab420eef43138983b8013997f845d7a0b4a9307c93f6b5f1fcccbb3a9cc411f2f1f024a191a33deefafb1a00014d8bb7109b8831c8adaaa0d3fbaf5908b0f"], &(0x7f0000000100)=0xee)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x80000001, @rand_addr="a4d50f142d8b3667b256ef7b459a2bff", 0x3}}, [0x7fff, 0x9, 0xffffffff, 0x3, 0x7, 0x8, 0xd86, 0x99, 0x5, 0x8, 0x5, 0x8, 0x7ff, 0x9, 0x6]}, &(0x7f0000000240)=0x100)

[  636.410475][T27976] binder: 27973:27976 ioctl 40046207 0 returned -16
19:54:42 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:42 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x101000, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000140)={0x0, 0xfffffffffffffffc, 0x1, 0xfffe})
r1 = fcntl$dupfd(0xffffffffffffffff, 0x3, 0xffffffffffffffff)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000380)=0x5)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000004c0)="2bd83b", 0x3}], 0x1, 0x81806)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={<r4=>0x0, @in6={{0xa, 0x4e22, 0x800, @mcast2, 0x667dd7e9}}, 0xca, 0xd81}, &(0x7f0000000240)=0x90)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e23, 0x5, @loopback, 0x7}}, 0x1, 0x1, 0x5, 0x400, 0x30}, &(0x7f0000000340)=0x98)
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, 0xffffffffffffffff)
sendfile(r1, r3, 0x0, 0x2000006)
r5 = getpgrp(0x0)
r6 = getpgrp(0xffffffffffffffff)
kcmp(r5, r6, 0x4, r2, r2)

[  636.658717][T27995] binder: BINDER_SET_CONTEXT_MGR already set
19:54:42 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:42 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  636.711577][T27995] binder: 27994:27995 ioctl 40046207 0 returned -16
19:54:42 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r1)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x40000)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000080))
r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x356, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd7000fbdbdf2501000900000000000000000000142eba0018000000cd7564703a73797a3100000000"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0x8)
pread64(r0, &(0x7f0000000680)=""/204, 0x5fb, 0x0)
getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000240)=""/149, &(0x7f00000000c0)=0x95)

19:54:42 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:42 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:42 executing program 1:
r0 = memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x0)
ftruncate(r0, 0x7fd)
ftruncate(r0, 0x0)

[  637.044904][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  637.051299][T28017] binder: BINDER_SET_CONTEXT_MGR already set
[  637.142572][T28017] binder: 28014:28017 ioctl 40046207 0 returned -16
19:54:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = dup2(r0, r1)
setsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000100)="d6e97aeba8056880e8be0d8884edf63a98a25f4f5c0a9797c0f091514020c76a934b53521b07b6ba253f0d4965470875305a074c163985b2327d66b44a29139c4baa33a4db2be2f2f2d973fafac49ede58d4478fa402fd275f12dde32c3a6ca1d0ef2fa38c68130917a52cb656b4d19476ee2239a2c330f64e9ee2019eb0886560f8c0dc17b6f48311052896f6cf813bd5eba3fa567ac6bc47c5d6de0f37bf8c82a9213c8ccc3f37f6fd8a4e3ae105f654df82fd36754c52d9aef7beddf676227fb2732a535372fbc2eae3d9e60dccc007105c7bfdd9b25d9dd163eeb965d1c2c2db29441ab799642d", 0xe9)
setsockopt$inet_tcp_int(r1, 0x6, 0xc, &(0x7f00000000c0), 0x4)

19:54:43 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:43 executing program 1:
recvmsg$kcm(0xffffffffffffff9c, &(0x7f00000001c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000340)=""/207, 0xcf}], 0x3, &(0x7f0000000480)=""/221, 0xdd}, 0x40)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={<r1=>0x0, 0xfffffffffffffffd}, &(0x7f0000000580)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000005c0)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000680)='/dev/dlm-control\x00', 0x800000000080840, 0x0)
stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=<r5=>0x0)
write$FUSE_ATTR(r3, &(0x7f0000000840)={0x78, 0xffffffffffffffda, 0x3, {0x7, 0x8000, 0x0, {0x5, 0x6b1, 0x9, 0x20, 0xfffffffffffffff7, 0x0, 0x9, 0x4000000000000000, 0x5, 0x4, 0x7fffffff, r4, r5, 0xffffffff, 0x10001}}}, 0x78)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000240)={0x0, 0x0, @ioapic={0xf000, 0x0, 0x4}})

19:54:43 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:43 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
io_setup(0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4004e20, 0x0, @loopback}, 0x1c)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)='vcan0\x00')
listen(r1, 0x20000000)
r2 = socket$inet6(0xa, 0x6, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, 0x0)
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1)
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @loopback}, 0x1c)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0)
r4 = getpid()
r5 = getuid()
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f0000000800)={0x7fff, 0x2})
stat(0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmmsg$unix(r3, &(0x7f00000007c0)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="74cbefe131f6574861c1225414ff1d3d1977800331eab38351f73064e1726b7a920a3cbe9cfe0b348c24e015b23c9638b2dc6e1f103f4d10fdf5bad3458eb4410e9dbef27d22dfe2498b6ed6bcf5ce411f850b239eb82d65f61c1655c83ae146c6de4d324bea68b253a1e3e562898a7a2aa9c5c638d6f08903d5961db19cadfc011cfba9cea52ddcc791e4bd55bf", 0x8e}, {&(0x7f0000000200)="67543e53b12dc495bdbda0ec16d67a4ad250222b6be1c0706269b3c417f2e8f29f9104931203a75b46caca41cb1c3a19a889d165a908b49a457f94fd42fd79cd7dfbabfce80202dfd673b00892eb86785495741ab6d36f312864a9d72736c2555dd992396b21d44ef01d38718bf8561ef65f6a94c10f92f3c42c30f3b2e6297770b53549917012de4d02eab4d7d921c13fd2c4e8442376a822a924743dad758a0393206d82acc115d2929997c1d7dc4df5c50112db4cdb522b4ce5f7f75028f152ada5ee4d642aefe7a9d40fa507edc758bdf1f3ece925434bb52671a3651b22f31e7833ac71d9cd78d194775fa518646e8b859300edcc", 0xf7}, {&(0x7f0000000300)="1112f769dda808dd0ac8dab74d3b53e10e073ca6fa5c06f00afc97b3c27a31095d7bef8213d8ff7138dede87f09cc1334d7d84b27b31a07b7b94384398b8d681de0ed0de3e9eff4ae5332d3058d1de823c1e07ee2cb53d8ab794d0d08dc87cf9ebd20509badfa96b6318e08ca3a03b8eb1bfbff60cc35847114adf3009e490d44cdd1733173ff259e181623a20e46a538b7236b7b6592a0e1fe11a46c7cc556171b21f80e3858f2bcefdb91f5013b2b66813da00a7732c38f15f9026e9ca149c8db1bea3459e96e68235881d75afbf7c8fc0e085c4f3e034df9b4596c5eb113cbed32de320", 0xe5}, {&(0x7f0000000400)="eedba76f3b1d74af9798dd1ef8265fb2ba763fe1fdfead8e83d00e9758f5d38e9bc5e111ebc1d5a22ba0c638787a66fb5a2da7bd01d8a9299d03d67dc57f682a8ec32afdaade9086d2985d3548f22632bd234790da9180a696d708fe", 0x5c}, {&(0x7f0000000480)="67b45185c2466d4ef4327bbbccdf5b9aa8198a6009f7e9b69cd8fc6158e694097bdd68c294654b851ce602a87f538c30cb96cefaa1fd060aee53c9b1a7e9ab545cda244d868c4faf5a1517f9514cc0c8c3bf8a8a16d46663ff50cd6fb0853354d60b07e41d269d3f0569049ea5f8371a044684d1295079775b8d8f4a9c55054dbe725d816575d9e74d0e19aa15c13cfe017b44451b103adbf06f42a70afd35a9167e700b587513eefcf195ad4ea460370c4433ff1d185dc69824d54652a8fbba7f1f3d2300f6cf90472545a7eae54dbbd4a17711bd64160dbb9922f0ef29cb280be9a891d2ace9827e39430ac3451d3d591d7aad5041", 0xf6}, {&(0x7f0000000580)="f875fd79583c109e656a94205d5362141df57d20634bb07cfab53f51dd15525f0729e49974e838a471f342ad444acac4a414a25bb5ec841477751c850f9755e398d584bc5853fe68aa7555ea3ebe3a586cd77b2cd98927cff11367e53f62d08d68e5f638f04c0aaef6ecbae2e8b3e9a01e57bc9c65c2bd0c6bdcd871e5a2972bd86e0d5885a2a37d1d271074ca8b08291b4c85565fae4d5f08528d8a4a05ae332a254cc154b496df82de7f66ff7b8e6662a6fa5d6427", 0xb6}], 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="0000000018000000000000000100000001000000f69fb8efcb15a44b921e0ae1e6e52c8dd51636da4b42dbc62a12b2b77d00ce625d14dbe492d218b04386ee7368c77a9168db1d1613d7a272c6649f1d277bf50bcdae7e85bc74d55851d0f0dc2176d5ae528d57020923b2d6948af5233857f5b1cb9e4fc19c7fb0a3306f3d9b752d713ebd6bbe7d2d81ee61e5b56e394b17c80d7bd47a5bf2ccf46f02b40a27", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x40}], 0x1, 0x8004)
r7 = accept4(r1, 0x0, 0x0, 0x0)
syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2)
sendmmsg(r7, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x2a, {0x700}, 0x0, 0xe803000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}, 0x2000000}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0)

19:54:43 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x0, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$update(0x2, r2, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8002)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

19:54:43 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9}}], 0x0, 0x0, 0x0})

19:54:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:43 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa}}], 0x0, 0x0, 0x0})

19:54:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:43 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x1, 0x0, {0x0, @raw_data="2085f3072c9b42f03f10be83b68ebcf014a0409fdf8be3d3e82c747c7f79f7cee00b443f02000000a91ca25441677d169fb75a152d6eebf4bef6c96076d67f243aebaac6430c9ef1a788e60eb3d0a7c29a5e3416871c8a51df55701a05e0a2f09883c482efaf6dc9e1695038733a23bbf0faf76a1d3fae5c251c4fad507b2ead2f1581057e3f84f3e8503ee570d8069eb53a897d2dd5f3d89629917fb171132181e9f3c510ac5229a6b6096547977578c5795d84cf23fe1d042df97dbd37a4b3d0e338a1b611e3ae"}})

[  637.803151][T28063] binder_transaction: 45 callbacks suppressed
[  637.803168][T28063] binder: 28062:28063 transaction failed 29189/-22, size 0-0 line 2995
19:54:43 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2}, {@in6=@ipv4={[0xfffffff0], [], @broadcast}}, @in6=@ipv4}}, 0xf0}}, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000200)=0xd837, 0x4)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x218000, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'gre0\x00', 0x400})
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x1, 0x2}, 0x10)
r3 = socket(0x200000000010, 0x3, 0x5)
write(r3, 0x0, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x80000000)
write(r3, &(0x7f0000000280)="2400000052001f0014f9f407002c04091c0007ed100021000a0000000900000000000000", 0x24)

[  637.880820][T28067] binder: 28065:28067 transaction failed 29201/-22, size 0-0 line 3211
[  637.894223][T28069] binder: 28062:28069 transaction failed 29201/-22, size 0-0 line 3211
19:54:43 executing program 2:
prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f00000003c0)={&(0x7f0000a00000/0x600000)=nil, &(0x7f0000a12000/0x2000)=nil, &(0x7f0000c01000/0x4000)=nil, &(0x7f0000b1d000/0x3000)=nil, &(0x7f0000bc9000/0x3000)=nil, &(0x7f0000c9a000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000bca000/0x3000)=nil, &(0x7f0000cb2000/0x1000)=nil, &(0x7f0000e7a000/0x4000)=nil, &(0x7f0000a96000/0x2000)=nil, 0x0}, 0x68)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
close(r0)
r1 = request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='em1\x00', 0x0)
r2 = add_key(&(0x7f0000000480)='id_resolver\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000500)="b09100b1535434c2ea30b29d1c7f1e4d6cc70dff22e646a439ff65b2205ac626127dbde0db635ad2fc764311f9c738f7707f3f17c3247d487b7d5ba3573fcef1edd198d668f20863fd50cfc15ce6e286bce76daaa9424135a76abf2f6bc3c0ec57cb1039ac4901b54bc6827225f6270515d760a4bc8851a5dd56242c", 0x7c, 0xfffffffffffffff8)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000440)=[{&(0x7f0000000100)="d635f814cea05db40fbc84a7d5f56d2107d28a0a9aa8bf0ccea9d28b9cd083c0ad84da3db24468d34a55ba1a90d4fbc2550f1f1b530a66353b8dbef8f15cb7bea03a19846e2c55b6fe0a6ced029958c24460437a9c2b6a0eb6429f5ed0bf16bd56a3a5a143925535349af27276f0099c8f1ea3f3b0b60174bf44d84e3c07f75ba59719448125787165910ed5b93c290cffad7d70b1614e0c0269c12756e27c4058", 0xa1}, {&(0x7f00000001c0)="217725e6cfeecc27a2c6ed145441392c68d73df0d849b60ef54275815d82f7b40474ba1fa23a83da0999ef49f457d4a2b760ef0362053e03ec14a914b2a2d0ce0cc088bfcfb9203d5afe0e42e9c9e966ca2281fe49f8a0b3f84025c7c83d1fd84c898484c543959d4df2bc02521a275e6b11e27c56cea938fb11614e8135d774514677f408435105444ef3639b4218c80dd2ba8b4d8704801957cff9358761106b83", 0xa2}, {&(0x7f0000000280)="c07c088bc4dceb62b258712008d11fdeb2fc0609210a273d2e5cc7bf32481a52f2abaafa9bf6d365903fa868c48c1237eed329550d6b4dc7c632b280386e1c8348444bb3008e31a93b7e2b765a3ba2dd13b2b16dc02ec4b3ac69e96c52ed79e8f3d41d3f66d6e58a379d7bd6a1f0852de3a9bc6809f9b140851f4c421269e01bf8eba6dca6c6f463bca9688613e187", 0x8f}, {&(0x7f0000000340)="b6edb4d58920e72d5caf13502b1314714d4ddb267dab6624d7fa688c4fcf6cba1172b554b617982acc95e3289f38cf3a9cdb25dd669d3b4bac86a45faf8765ee30453b12e154925c83800f06b6378ae2703eaa085226e2f57c8d44", 0x5b}], 0x4, r2)

19:54:43 executing program 1:
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)

[  637.976734][T28076] binder: 28065:28076 transaction failed 29201/-22, size 0-0 line 3211
19:54:43 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}}], 0x0, 0x0, 0x0})

19:54:44 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="050000000000000000000040050000b00000000000fa00000000e2470012c93ed03ec476423ced26ea27dba11b2112672fd8a6c41fc1df7658d2fc84af8834b8d377f3ea1af3440e376465dfea865829287db253a6aead6d5f270abf9a3b0cb54e3b4f9e55dec7122846a5949a3aa56bcdb40caf95b07b84655fa1273589035753068b28045508f2c3d9a85e5a"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x200000000048b}]})

[  638.154325][T28084] binder: 28083:28084 transaction failed 29189/-22, size 0-0 line 2995
[  638.259980][T26823] binder_release_work: 45 callbacks suppressed
[  638.259996][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  638.290540][T28091] binder: 28083:28091 transaction failed 29189/-22, size 0-0 line 2995
19:54:44 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x0, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:44 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
signalfd(r0, &(0x7f00000000c0)={0x3ca7}, 0x8)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x2eb, 0x200007fd, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10)
getsockopt$inet_buf(r1, 0x0, 0x50, 0x0, &(0x7f0000000000)=0x107)
r2 = msgget$private(0x0, 0x401)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
r6 = geteuid()
syz_mount_image$iso9660(&(0x7f0000000300)='iso9660\x00', &(0x7f0000000340)='./file0\x00', 0x5, 0xa, &(0x7f0000001840)=[{&(0x7f0000000380)="b29667334b40d3298abdc8d842a59b3e0f12f249ab2d19be6d4f0296fa08725f0a70693efa293d05aba70aa87785c8a0625acb98e4d522dc7482a087c330ab77084569f27b2e06afa6b67e96dee83ea57c3fe758fc66d0110a2e189d07a50db4eff9d495bad6a4450af792fd776302c89ca446c12eac9fbea4ed6585e327349b267c2dc3dba9aa646a2019cdab6bca65d41a369c81c0c2536b3c43be442dc6d1c818e58fe351df7595b626e8df1036a1d23932e8c9cea8d6564a29cb3a413eab319f91f5d9ffecafeaa73d4ec9cf1ca9de190b83b8d451bee84065ecb86ec459b03a922f5c526d6b6685680c63141777e6", 0xf1, 0xfffffffffffffffb}, {&(0x7f0000000480)="7da8ea475db30ac651467c4b811a66e787da792e667776b4d713b0aec99c7781c98cb9c5143e71a7011b5647fbfddb1b53318852e1761c094cb19fe665e86c706e67f6ff4395024dab5c81e4ab5795016ba9a69d9a904f3491970fd0d1523339d5905fa40abf63c59c9508066d0c59e2eea7e9a14a2c", 0x76, 0x5}, {&(0x7f0000000500)="d810d187f9be8a75e849e1831b5bb4456e74f542454443e0478630fcb8f4f4a5c5294584295f1ccbba27a370ae9374e18b6b4cbc02d6621701c7b9b7f6156e35f81b5e2aa7760920d3388cdd792ab2fd53ae0f7f7e3cafaa54a666a72e607ac1bea6a4e1583f8bdfd3ca25682816f15529f5d6d9efaf8aeafe0d03a342be316c4ae846a2ded3e35460ebbb9f6745", 0x8e, 0x7fffffff}, {&(0x7f00000005c0)="3c57c8b94bed9c60a845deadb8c364b716dabfd1c901d6461da9945df0d1697d6d71", 0x22, 0x2}, {&(0x7f0000000600)="450324da4a7f92cba673872f977e9969bb0a4e35a3", 0x15, 0x9}, {&(0x7f0000000640)="fb665839991736832990defb8c43e59cc4e350a3faddf101aed2053f49cf76b8e54036202b7aa9e484a1f113aa36a742213a25829383b8db30704353164ba3ad1c0030d721e3f696c90874ee5850cc9aef3422fb556bdfc41a07475b7136678ac9aafa44f29599655a0a7b70cbf1c08e4db0ec137b0213f1271eda0ce970dcd29ea8d752bbf89c74056263e4467a23936b0a0a242528c7beae04aa5644a8e45b05a9d7b3a99432199834dc51bbc626e932251011e2df9f6d8bbde319f63224ed883014095123632c89701c61e788674a41c79c4c583086eb068d33d3bfb8d9dd4db9ab97db92d5c3dd89d741c6225d6243d08f7e80ac89", 0xf7, 0x80000001}, {&(0x7f0000000740)="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", 0x1000, 0x2}, {&(0x7f0000001740)="cc6c47a236cc61a570b5251d0eef2940f83417d968a94ab73a76167966c6dae366f0426f6808", 0x26, 0xfffffffffffffff9}, {&(0x7f0000001780)="b8e3eff768af3ea47e6c9102c9697b0f02b1e1ac773ba6f71e4d78d5f9391cc7807a7f8ef7021772e3603534db3e5706537605cc6cdb711a7f970837e4caa617c86747da032d418d2fc649aecedab00803535eafb0a94ea0f7bb73dfec4a1d67420694869785acd8779b4e923e12e7254ed8fd85", 0x74, 0x100}, {&(0x7f0000001800)="b8d5b4cfa52529f92e32c0a56fffc37b1a188b0edf32a5e2d56664d4c5a0", 0x1e, 0x2}], 0x1100000, &(0x7f0000001940)={[{@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x80000000}}, {@cruft='cruft'}], [{@smackfshat={'smackfshat', 0x3d, 'self{('}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted*mime_type'}}, {@smackfsdef={'smackfsdef'}}, {@fowner_gt={'fowner>', r4}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt={'uid>', r6}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'proc'}}, {@smackfsdef={'smackfsdef', 0x3d, '![vboxnet1systemcpusetproc{md5sumkeyringeth0!vboxnet0self\x00'}}]})
getgroups(0x3, &(0x7f0000000240)=[0x0, <r7=>0xee00, 0xee01])
r8 = getpgid(0x0)
r9 = getpid()
msgctl$IPC_SET(r2, 0x1, &(0x7f0000000280)={{0x0, r3, r5, r6, r7, 0x44, 0x1a12bfeb}, 0x5, 0xe773, 0x401, 0x2, 0x20, 0x2, r8, r9})
ioctl$sock_proto_private(r0, 0x89e8, &(0x7f0000000040)="f34628aed4016b8b7d012b8dfe854619e77715f317c1d5379d57debdfd205294d53cc730c9")

19:54:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00\x00\x00\x03\x00', 0x19, 0x2, 0x268, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000540)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0xd, 0x0, 0x0, 'ip6gre0\x00', 'gre0\x00', 'bridge_slave_1\x00', 'veth1_to_bridge\x00', @remote, [], @remote, [], 0xb0, 0xb0, 0xe8, [@quota={'quota\x00', 0x18}]}}, @common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}}, {{{0x15, 0x0, 0x0, 'ip_vti0\x00', 'syz_tun\x00', 'sit0\x00', 'bond0\x00', @remote, [], @local, [], 0xc0, 0xc0, 0xf0, [@helper={'helper\x00', 0x28, {{0x0, 'RAS\x00'}}}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x2e0)

19:54:44 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x63}}], 0x0, 0x0, 0x0})

[  638.348743][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:54:44 executing program 2:
r0 = syz_open_dev$dspn(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bpq0\x00', 0xffff})
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)

[  638.467939][T28096] binder: 28095:28096 transaction failed 29201/-22, size 0-0 line 3211
[  638.505675][T28105] binder: 28104:28105 transaction failed 29201/-22, size 0-0 line 3211
[  638.540268][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  638.565123][T28109] binder: 28095:28109 transaction failed 29201/-22, size 0-0 line 3211
[  638.596500][T28110] binder: 28104:28110 transaction failed 29201/-22, size 0-0 line 3211
[  638.597997][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  638.618743][T28100] xt_helper: cannot load conntrack support for proto=7
19:54:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @pic={0x0, 0x5}})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102], 0x1f000})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}})
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7, 0x2})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:54:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  638.659204][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  638.667210][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  638.692407][T28116] xt_helper: cannot load conntrack support for proto=7
19:54:44 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5f5e0ff}}], 0x0, 0x0, 0x0})

19:54:44 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x63}}], 0x0, 0x0, 0x0})

19:54:44 executing program 1:
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000)
r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x100)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x9, 0x2833, 0x2, 0x0, 0x6, 0x1000, 0x5002, [], 0x8})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
socket$packet(0x11, 0xa, 0x300)
syz_emit_ethernet(0x165, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000380))
io_cancel(0x0, &(0x7f00000003c0)={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x408400)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3ce50000", @ANYRES16=r4, @ANYBLOB="6b0026bd7000fddbdf250700000014000100080004004e24000008000600727200000c00020008000300030000000800050009000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4)

[  638.850453][T28124] binder_transaction: 15 callbacks suppressed
[  638.850466][T28124] binder: 28123:28124 got transaction with unaligned buffers size, 12
[  638.892599][T28129] binder_alloc: 28123: binder_alloc_buf size 100000000 failed, no address space
19:54:44 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = accept(r0, 0x0, &(0x7f00000005c0)=0xffffff21)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000580)={&(0x7f0000000380), 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x110, r2, 0x6, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x501e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x928}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x30f5e133}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffb}]}]}, @TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x6, @dev={0xfe, 0x80, [], 0x12}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0xfffffffffffffb98}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x100, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
openat$cgroup_int(r3, &(0x7f0000000640)='pids.max\x00', 0x2, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x194, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x942}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x33}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x22}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2fe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x800}, 0x810)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
socket$inet(0x2, 0x80a, 0x0)

[  639.000443][T28129] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
[  639.056901][T28135] binder: BINDER_SET_CONTEXT_MGR already set
[  639.056935][T28136] binder: 28123:28136 got transaction with unaligned buffers size, 12
[  639.113763][T28135] binder: 28123:28135 ioctl 40046207 0 returned -16
[  639.120621][T28137] binder_alloc: 28123: binder_alloc_buf size 100000000 failed, no address space
[  639.132855][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  639.139182][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  639.159155][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  639.182388][T28137] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:54:45 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x0, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:45 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x63}}], 0x0, 0x0, 0x0})

19:54:45 executing program 1:
r0 = socket$inet(0x2, 0x200000000003, 0x19)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in=@empty}}, 0xe8)
getsockname(r0, &(0x7f0000000100)=@ax25={{0x3, @bcast}, [@rose, @remote, @null, @rose, @default, @null]}, &(0x7f0000000180)=0x80)

19:54:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:45 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x0, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  639.227360][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:54:45 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x2, 0x0, 0x0})

[  639.279549][T28150] binder: 28149:28150 got transaction with unaligned buffers size, 12
19:54:45 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x2)
write$smack_current(r1, &(0x7f0000000040)='systemposix_acl_access\',posix_acl_accesseth0\x00', 0x2d)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000440)={0x11, @local, 0x0, 0x1, 'none\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000500)={0x11, @broadcast, 0x0, 0x1, 'rr\x00'}, 0x2c)

19:54:45 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x63}}], 0x0, 0x0, 0x0})

[  639.413538][T28157] binder: 28149:28157 got transaction with unaligned buffers size, 12
19:54:45 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r2 = syz_open_procfs(0x0, &(0x7f0000000500)='net/ip_tables_targets\x00')
preadv(r2, &(0x7f00000017c0), 0x1be, 0x0)

[  639.462464][T28162] binder: 28156:28162 got transaction with unaligned buffers size, 12
[  639.522208][T28162] binder: 28156:28162 ioctl c0306201 20007000 returned -14
19:54:45 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x404c534a, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1, 0x5c}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x4000, 0x0)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
syz_open_dev$ndb(&(0x7f0000000300)='/dev/nbd#\x00', 0x0, 0x206400)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8}, 0x10)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={<r3=>0x0}, &(0x7f0000000380)=0xc)
ptrace$setopts(0xffffffffffffffff, r3, 0x80, 0x20)

19:54:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  639.571694][T28169] binder: 28156:28169 got transaction with unaligned buffers size, 12
[  639.597639][T28169] binder: 28156:28169 ioctl c0306201 20007000 returned -14
19:54:45 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000600)={0x0, 0x6}, 0x4)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
write$ppp(r1, &(0x7f0000000640)="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", 0x1000)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0)

[  639.709727][T28176] binder: 28175:28176 got transaction with unaligned buffers size, 12
19:54:45 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:45 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x3, 0x0, 0x0})

[  639.752009][T28177] binder: 28175:28177 got transaction with unaligned buffers size, 12
19:54:45 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
r1 = epoll_create1(0x0)
r2 = timerfd_create(0xffffffffffffffff, 0xd83300d93ff69589)
close(r2)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x385800, 0x0)
ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000140)={0x0, 0x0, 0x1, {0x0, 0x3, 0x1db0, 0x6}})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x51a1, 0x0, 0x301f, 0x7, 0xffff, 0x80000001, 0xf8, 0x1})
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffffa, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000021ff4)={0x2001})

[  639.826957][T28184] binder: 28183:28184 got transaction with unaligned buffers size, 12
19:54:45 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  639.890702][T28184] binder: 28183:28184 ioctl c0306201 20007000 returned -14
19:54:45 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
close(r1)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001100)=ANY=[])
socket$packet(0x11, 0x1000000003, 0x300)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000b04000)={0x0, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0})
r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioctl$TIOCGSERIAL(r1, 0x541e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/4})
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x10000)
openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1})

19:54:45 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000001000)=ANY=[@ANYBLOB="14000000150001032cbd70000000ffffffff0000"], 0x14}}, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc4, r1, 0x0, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x12}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x90)

[  640.030943][T28195] binder: 28194:28195 got transaction with unaligned buffers size, 12
19:54:46 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4, 0x0, 0x0})

[  640.100790][T28195] binder: BINDER_SET_CONTEXT_MGR already set
[  640.128851][T28195] binder: 28194:28195 ioctl 40046207 0 returned -16
19:54:46 executing program 3:
memfd_create(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x20400, 0x4)
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="430000070700003a007108000000feffffff0000000000000000000000000000000000fbffffffffffffe80000000000000000000000000000000000000000000000006643f31b1263d007a9db9a55747c1d571b432cedd0b939a94914d2a757b5a71609d1b4dfb131d9cdd9cafa82d013c3cb4a26de6b637a8be4d6bac493fdb1c132c76f3440973a9e664e37a7763ec8067aa6a0c7db23239cdb1f58c8ee284f427e24"], 0x43)

19:54:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:46 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/219)

19:54:46 executing program 2:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x20002)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'lo\x00', 0x3}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x2000000080003, 0xc)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x1d8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001100000000000000000076657468315f746f5f7465616d000000736974302000000000000400000000006272696467653000000000000000000076657468305f746f5f627269646765000180c2000000000000000000aaaaaaaaaa0000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff01000000110000000000000000007465716c30000000000000000000000073797a5f74757e000000000000000000697036677265300000000000090000007663616e30000000d53fa73b00000000ffffffffffff000000000000aaaaaaaa98aa00000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x250)
ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f00000001c0)={0x0, 0x0})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000380], 0x2, 0x0, &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'bcsf0\x00\x00\x00\x00\b\x00', 'veth0_to_bond\x00', 'vcan0\x00', 'vlan0\x00', @broadcast, [], @empty, [], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1b0)
getpeername$ax25(r0, 0xfffffffffffffffd, &(0x7f0000000180))

19:54:46 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  640.291199][T28211] binder: 28210:28211 ioctl c0306201 20007000 returned -14
19:54:46 executing program 3:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendfile(r0, r0, 0x0, 0xa872)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x6, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x80000000001)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000001c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xfffffffffffff352, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x7fff}]}})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0)
fcntl$setpipe(r4, 0x407, 0x33d)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000400)=<r6=>0x0)
syz_open_procfs$namespace(r6, &(0x7f0000000480)='ns/uts\x00')
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f00000002c0)={0xfffffffffffffffa, {{0xa, 0x4e24, 0xe9, @empty, 0x4}}}, 0x88)
close(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f00000004c0)=""/170, &(0x7f0000000580)=0xaa)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x0, 0x400000000000041)
ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f00000003c0)={0x1, 0xbb, 0x400, 0xf08, 0x10})

19:54:46 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x800020000000000c, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10)
recvmsg(r0, &(0x7f000000ad40)={0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2)
accept4$netrom(r1, &(0x7f0000000040)={{0x3, @bcast}, [@remote, @netrom, @bcast, @null, @remote, @null, @remote, @bcast]}, &(0x7f00000000c0)=0x48, 0x80800)

19:54:46 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x5, 0x0, 0x0})

[  640.383556][T28223] binder: 28210:28223 ioctl c0306201 20007000 returned -14
19:54:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  640.478637][T28233] ebtables: ebtables: counters copy to user failed while replacing table
[  640.498181][T28236] binder: 28235:28236 ioctl c0306201 20007000 returned -14
[  640.543632][T28239] binder: 28235:28239 ioctl c0306201 20007000 returned -14
19:54:46 executing program 1:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000240)={0x8, 0x0})
r2 = socket(0x10, 0x80803, 0x2000000000000004)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r3=>0x0, 0x3f, 0xffffffffffff0bda}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x4}, &(0x7f0000000100)=0x8)

19:54:46 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6, 0x0, 0x0})

[  640.629431][T28242] binder: BINDER_SET_CONTEXT_MGR already set
19:54:46 executing program 1:
syz_mount_image$iso9660(&(0x7f0000002fc0)='iso9660\x00', &(0x7f0000003000)='./file1\x00', 0x0, 0x2be, 0x0, 0x0, &(0x7f0000003500)={[{@block={'block'}}]})
r0 = getpgid(0x0)
r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
write(r1, &(0x7f00000000c0)="e26082ccfcd4cbc3deeb1a740ee8709b", 0x10)
r2 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x01\x04\x00o\xb7\xdeonid\x00G+!\xa7I\x05\xee\xe6\xc0\xa5&j\b\x92d\xeb\xfc\x9dMa\xd6\x9e\rO\xee\x8f.\xb7\xa8\xbeA')
ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x9)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000000)={0x9}, 0x4)

[  640.714853][T28242] binder: 28241:28242 ioctl 40046207 0 returned -16
[  640.745323][T28250] binder: 28247:28250 ioctl c0306201 20007000 returned -14
[  640.755380][T28251] binder: 28247:28251 ioctl c0306201 20007000 returned -14
19:54:46 executing program 3:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000002f80)='./file0\x00', &(0x7f0000002e40)='hugetlbfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x0)
mq_unlink(&(0x7f0000000000)='\x00')

19:54:46 executing program 2:
symlink(0x0, 0x0)
semget(0x2, 0x0, 0x254)

19:54:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:46 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7, 0x0, 0x0})

[  640.924626][T28261] binder: 28260:28261 ioctl c0306201 20007000 returned -14
19:54:47 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:47 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x80045530, 0x0)

19:54:47 executing program 1:
madvise(&(0x7f0000b56000/0x2000)=nil, 0x2000, 0xf)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x121002, 0x0)
open_by_handle_at(r0, &(0x7f0000000300)={0x78, 0x1ff, "1038535870c97480f391603207b1ac7b32dfa4e12ee92c6ee006007106800273374657f4fb605c38ac3465d4b7bd9b626633a9d1456a8d00a1f509e15e1aadc4e48ee389d0d885218f37ec663e5eddb97442c5a5633527bf062bea88523520668d6996941a301cecfcd77f798e37bbbe"}, 0x80600)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='smaps\x00')
preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x400000000000)
r2 = gettid()
ptrace$getregset(0x4204, r2, 0x203, &(0x7f00000000c0)={&(0x7f0000000280)=""/76, 0x4c})
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x18000, 0x0)

19:54:47 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0xa, 0x0, 0x0})

19:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:47 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
close(r0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

[  641.188578][T28276] binder: 28275:28276 ioctl c0306201 20007000 returned -14
19:54:47 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:47 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0)
ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040))
set_mempolicy(0x8004, 0x0, 0x0)

[  641.239938][T28288] binder: 28275:28288 ioctl c0306201 20007000 returned -14
19:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:47 executing program 3:
unshare(0x8000000)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={<r1=>0x0, 0x93, "3f704eaaeb00a1f3f14e68d5e82900c88001d9ac0e6ffd72028a769462463e7bcea0ee2052267beb5b00c7748d9a7b8ea7aa485c1dee2e4deafdd4a293a3b7ec0b2ab32369f1551c7ec88f3d0179c0b4d0786bfce34db80ca0cb708fb65ff1b04cd97ae88a259c8262ce2445188fc77fb6a1cba5fbb8804395c7fc1b0c6bdc56e5b5bede7f0b26755b08b4c483cafa4a3fae3d"}, &(0x7f0000000180)=0x9b)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000001c0)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x100000001, @empty, 0xfffffffffffffffb}}, [0xca8, 0x1, 0x5, 0x200, 0x1000, 0x4b, 0x80, 0x5, 0x7fff, 0x0, 0x0, 0x80, 0xffffffffffffff41, 0x2, 0x80000000]}, &(0x7f00000002c0)=0x100)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r1, 0x3, 0x100000001, 0x40, 0x7, 0x9, 0x5c8, 0x3, {r2, @in6={{0xa, 0x4e24, 0x7, @mcast2, 0x7f}}, 0x4, 0x80, 0x6, 0x3f, 0x5}}, &(0x7f0000000480)=0xb0)
r3 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x8})
mq_timedreceive(r3, &(0x7f0000000000)=""/25, 0x19, 0x0, 0x0)
mq_timedreceive(r3, &(0x7f0000000300)=""/162, 0xa2, 0x0, 0x0)

19:54:47 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x10, 0x0, 0x0})

19:54:47 executing program 2:
r0 = dup(0xffffffffffffff9c)
listen(r0, 0xff)
r1 = socket$kcm(0x10, 0x5, 0x10)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008104e00f80ecdb4cb9d902631912080003003b00000012000100034c000040d819a9060015000000", 0x2e}], 0x1}, 0x0)

[  641.461225][T28302] binder: BINDER_SET_CONTEXT_MGR already set
[  641.503473][T28302] binder: 28293:28302 ioctl 40046207 0 returned -16
19:54:47 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(0xffffffffffffffff, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:47 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:47 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
unshare(0x400)
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
r4 = fanotify_init(0x0, 0x0)
fanotify_mark(r3, 0x11, 0x2, r3, 0x0)
write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1)
read(r4, 0x0, 0x18)

[  641.593386][T28307] binder: 28306:28307 ioctl c0306201 20007000 returned -14
[  641.706358][T28323] binder: 28306:28323 ioctl c0306201 20007000 returned -14
19:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:47 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:47 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:47 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x48, 0x0, 0x0})

[  642.002392][T28334] binder: 28333:28334 ioctl c0306201 20007000 returned -14
[  642.051713][T28341] binder: 28333:28341 ioctl c0306201 20007000 returned -14
19:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:48 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(0xffffffffffffffff, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:48 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4c, 0x0, 0x0})

[  642.282128][T28357] binder: 28356:28357 ioctl c0306201 20007000 returned -14
[  642.298120][T28358] binder: 28356:28358 ioctl c0306201 20007000 returned -14
[  642.319893][T28359] binder: BINDER_SET_CONTEXT_MGR already set
19:54:48 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x68, 0x0, 0x0})

[  642.351893][T28359] binder: 28353:28359 ioctl 40046207 0 returned -16
19:54:48 executing program 3:
r0 = socket$inet(0x10, 0x7, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="24000000240007011dfffd940101830020200a000900000001000000000000000d00ff7e", 0x24}], 0x1}, 0x0)

19:54:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  642.502535][T28365] binder: 28362:28365 ioctl c0306201 20007000 returned -14
[  642.601649][T28375] binder: 28362:28375 ioctl c0306201 20007000 returned -14
19:54:48 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:48 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(0xffffffffffffffff, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:54:48 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:48 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f0000000300)=0xffffffffffffff20, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x20, 0x434000)
getsockopt$packet_buf(r3, 0x107, 0x16, &(0x7f0000000200)=""/188, &(0x7f0000000040)=0xbc)
listen(r2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x806cb1}, 0x8)
close(r1)

19:54:48 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6c, 0x0, 0x0})

19:54:48 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  643.112004][T28395] binder_transaction: 50 callbacks suppressed
[  643.112021][T28395] binder: 28393:28395 transaction failed 29201/-22, size 0-0 line 3211
[  643.130956][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  643.194437][T28396] binder: 28394:28396 transaction failed 29201/-22, size 0-0 line 3211
[  643.231457][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  643.236074][T28400] binder: 28393:28400 transaction failed 29201/-22, size 0-0 line 3211
19:54:49 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x0, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  643.301488][T28396] binder: 28394:28396 ioctl c0306201 20007000 returned -14
19:54:49 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
flistxattr(0xffffffffffffffff, &(0x7f00000000c0)=""/14, 0xe)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r0, &(0x7f0000000200)={0x7}, 0x7)
r1 = open(&(0x7f0000000340)='./bus\x00', 0x141046, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000140)={0xa8, 0x4, 0x8000, @random="d9c798397c62", 'bcsh0\x00'})
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000101})
fallocate(r2, 0x10, 0x0, 0x3f)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000001c0)={0x0, r2, 0x2, 0x0, 0x0, 0xfffffffffffffffb})

[  643.351109][T26823] binder_release_work: 47 callbacks suppressed
[  643.351121][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  643.426386][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:54:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  643.470782][T28407] binder: 28394:28407 transaction failed 29201/-22, size 0-0 line 3211
[  643.533192][T28407] binder: 28394:28407 ioctl c0306201 20007000 returned -14
[  643.557691][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  643.605837][T28414] binder: 28412:28414 transaction failed 29201/-22, size 0-0 line 3211
19:54:49 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x74, 0x0, 0x0})

19:54:49 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x1a, 0x0, &(0x7f0000000000)=0xffffffffffffff9e)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)

19:54:49 executing program 3:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123d319bd070")
r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f0000000480)='\x00', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r2, r3, r2}, 0x0, 0x0, 0x0)
ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f00000000c0)={0x5, 0x7f, 0x8})

[  643.653308][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:54:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x3}}, 0x18)
syz_open_pts(0xffffffffffffffff, 0x581000)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
fchdir(r0)
syz_open_dev$mouse(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204006902000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

[  643.707189][T28415] binder: 28412:28415 transaction failed 29201/-22, size 0-0 line 3211
[  643.772527][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  643.789779][T28423] binder: 28416:28423 transaction failed 29201/-22, size 0-0 line 3211
19:54:49 executing program 2:
timer_create(0x3, 0x0, 0x0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0)
listen(0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000300)='\a', 0x1, 0xfffffffffffffffe)
bind$x25(r0, 0x0, 0x0)
getpeername$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000180)=0x10)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="3894e0aa755678642797c675ec97969c56f2bf12f6039bb83db491604e9211ccc8408e7618ea37393e03de7717926ee49759d8a25fe0ee491d33465a996e601cab82e84deffd4f43b4b8de7c4fc0f12375966fce546ed08ab352a291b7f16898f20eb89ab513fe62e97796f94ae97e59c92f1eb86a95087d0372707700c803790f74e808663977e98054589d308059a63b0534d429abbad8c75335c1bcd5f596b4ef809be3492bf40907de6a8cedbb24290c9e878204418bbe903f3ced734530", 0xc0, 0xfffffffffffffffd)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000200), 0x4)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f0000000340)=""/83, 0x53, &(0x7f0000000080)={&(0x7f0000000040)={'sha384\x00'}})
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, 0x0, &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0//ile0\x00', 0x0)
r3 = add_key(&(0x7f0000000540)='id_legacy\x00', &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)="61afc476cd3d1e01beafb11aceac636b75a060fc48f782626ef54335d32c8f2c747bf9cbbc6a196cde35a48a0f8247a7fd", 0x31, r3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x4)

[  643.820444][T28425] MPI: mpi too large (181568 bits)
19:54:49 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:49 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r1 = shmget$private(0x0, 0x3000, 0x54000300, &(0x7f00007fc000/0x3000)=nil)
shmat(r1, &(0x7f0000ffa000/0x4000)=nil, 0x4001)
fcntl$getflags(r0, 0x408)
shmat(0x0, &(0x7f0000964000/0x3000)=nil, 0x7000)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x101, &(0x7f0000000000)="0adc1f123c123f319bd070")
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0)
write(r0, &(0x7f0000000400)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc0800090001000000", 0x24)

19:54:49 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x4200, 0x0)
fcntl$getflags(r0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGVERSION(r1, 0x80044501, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0xfffffffffffffe20)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
truncate(0x0, 0x0)
syz_emit_ethernet(0x2e2375a459d575dc, 0x0, 0x0)
fsync(0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4)
msgget$private(0x0, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f00000001c0)={0x0, 0x7530}, 0x10)
recvmmsg(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
stat(0x0, 0x0)
lsetxattr$trusted_overlay_origin(0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
stat(0x0, 0x0)
setfsgid(0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x5)

[  643.892546][T28423] binder: 28416:28423 ioctl c0306201 20007000 returned -14
[  643.969117][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  643.977877][T28439] binder: 28416:28439 transaction failed 29189/-22, size 0-0 line 2995
[  643.988421][T28438] binder_transaction: 35 callbacks suppressed
[  643.988432][T28438] binder: 28433:28438 got transaction with unaligned buffers size, 12
19:54:49 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x0, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  644.026317][T28439] binder: 28416:28439 ioctl c0306201 20007000 returned -14
19:54:49 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffffffffffffffe, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b5900d3e3573eed71a2f8ff00000002bf2000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x224)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)

[  644.069057][   T12] binder: undelivered TRANSACTION_ERROR: 29189
[  644.076163][T28438] binder: 28433:28438 transaction failed 29201/-22, size 0-0 line 3211
19:54:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008914, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000))
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x1800003e, 0x2, 0x2000000000041})

19:54:50 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7a, 0x0, 0x0})

[  644.126038][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  644.172250][T28448] binder: 28433:28448 got transaction with unaligned buffers size, 12
[  644.226537][T28453] binder: 28451:28453 got transaction with unaligned buffers size, 12
[  644.245466][T28448] binder: 28433:28448 transaction failed 29201/-22, size 0-0 line 3211
[  644.265787][T28453] binder: 28451:28453 ioctl c0306201 20007000 returned -14
[  644.304936][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:54:50 executing program 2:
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xfffffffffffffffd, 0x0, @dev, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [0x700000000000000]}}, 0x1c)
recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

[  644.352477][   T12] binder: undelivered TRANSACTION_ERROR: 29201
19:54:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:50 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x300, 0x0, 0x0})

[  644.393563][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  644.400293][    C1] protocol 88fb is buggy, dev hsr_slave_1
19:54:50 executing program 2:
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x500}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

19:54:50 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x119000, 0x0)
execveat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='GPL\x00', &(0x7f0000000200)='posix_acl_access\x00', &(0x7f0000000240)='\x00'], &(0x7f0000000300)=[&(0x7f00000002c0)=',(em0\x00'], 0x800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={<r2=>0x0}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r2, 0x7d53}, 0x8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1c, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x4000000000003a1, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast1}}}, &(0x7f00000005c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000008c0)={'vcan0\x00', <r5=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000900)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000a40)={'team0\x00', <r7=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast2}}, &(0x7f0000000b80)=0xe8)
accept4$packet(r1, &(0x7f0000000bc0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c00)=0x14, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000c40)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000d40)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000e80)={'team0\x00', <r11=>0x0})
getsockname$packet(r1, &(0x7f0000005240)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000005280)=0x14)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000005380)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000005480)=0xe8)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000005780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005740)={&(0x7f00000054c0)={0x280, r3, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xf0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r10}, {0x4}}, {{0x8, 0x1, r11}, {0x48, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r12}, {0x7c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x41}, 0x800)
fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  644.507926][T28473] binder: 28472:28473 ioctl c0306201 20007000 returned -14
[  644.551972][T28478] binder: 28472:28478 ioctl c0306201 20007000 returned -14
[  644.576881][T28474] binder: 28468:28474 got transaction with unaligned buffers size, 12
19:54:50 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x500, 0x0, 0x0})

[  644.645241][T28483] binder: BINDER_SET_CONTEXT_MGR already set
[  644.708866][T28483] binder: 28468:28483 ioctl 40046207 0 returned -16
19:54:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x84002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0xf8e, 0xfffffffffffffffc, 0xda70, 0x7}, {0x3, 0x0, 0x0, 0x7}, {0x20, 0x8, 0x2, 0xf}, {0x400, 0xfffffffffffffe00, 0x10000, 0x20}, {0x8, 0xff, 0x81c, 0x1}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
remap_file_pages(&(0x7f0000008000/0x200000)=nil, 0x200000, 0x2, 0x401, 0x142002)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:54:50 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x0, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  644.753986][T28489] binder: 28488:28489 got transaction with unaligned buffers size, 12
[  644.816829][T28489] binder: 28488:28489 ioctl c0306201 20007000 returned -14
19:54:50 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  644.880360][T28492] binder: 28488:28492 got transaction with unaligned buffers size, 12
[  644.901332][   T26] audit: type=1326 audit(1555358090.755:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28493 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0
[  644.918942][T28492] binder: 28488:28492 ioctl c0306201 20007000 returned -14
19:54:50 executing program 1:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4000, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={<r1=>0x0, 0x9, 0x5, 0x1000, 0x4, 0x2}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000100)={<r2=>0x0, 0x3, 0x30, 0x9, 0x100}, &(0x7f0000000140)=0x18)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x923a, 0x4, 0xfffffffffffff04e, 0x2, 0x0, 0x91, 0xd81, {r2, @in6={{0xa, 0x4e24, 0x3, @local, 0x1}}, 0x0, 0x1, 0x7fff, 0x401, 0x3}}, &(0x7f0000000240)=0xb0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
ftruncate(r4, 0x8200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x12, r5, 0x0)
mlock(&(0x7f0000001000/0x3000)=nil, 0x3000)
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0)

19:54:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c1207849bd070")
setreuid(0x0, 0xee00)
r1 = geteuid()
setreuid(0x0, r1)
mknod(&(0x7f0000000140)='./bus\x00', 0xa8a, 0x0)
setreuid(r1, 0x0)
clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)

19:54:50 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x600, 0x0, 0x0})

[  645.014937][T28500] binder: 28499:28500 got transaction with unaligned buffers size, 12
[  645.058196][T28508] binder: 28499:28508 got transaction with unaligned buffers size, 12
19:54:51 executing program 3:
r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000000))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80080, 0x0)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r4, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0)
getsockopt(r5, 0x5, 0x1, &(0x7f0000000080)=""/158, &(0x7f0000000180)=0x9e)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe20001c781cb67c71bb0c6f5f4bf8ed60dce2176c22a20b22b9b24172b5569ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f671855d40a2c1c173d4bb121bc86270c32d39c480d09a29b8983169914d8df86417a802b772bb638f72ccdcbb46267b5751816c77b6739f484292d5ca5e1bc4efee06f4e07e6a795faee2af27a8f212980558066c60066ffed3d5b91b51c7ac494ee0e961cd5bd077bd7756f9e39dd3abdbe5c598cc5cbd44c5c319af923fbc4731545ff134749c2f42ee8454bf33ef309a6323dc847676d5be2fcb9abc717fc19396943ec0e264a80d64ca66ef2c42a57112a8a146097d9f4256ef6e6fd73be26e9a5f79b21dae42066d9cf4441021d64a2d6fd61c7ea709948d4b", 0x1a1, 0x0, 0x0, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_ifreq(r7, 0x89f1, &(0x7f0000000200)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000500)={@dev})
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2)
prctl$PR_SVE_SET_VL(0x32, 0x26c5c)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
dup(r4)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

[  645.117444][T28512] binder: 28511:28512 got transaction with unaligned buffers size, 12
19:54:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  645.186025][T28512] binder: 28511:28512 ioctl c0306201 20007000 returned -14
19:54:51 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffe2, 0x40000)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x6)
move_pages(0x0, 0x3, &(0x7f0000000080)=[&(0x7f0000001000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil], &(0x7f0000000100)=[0x1], &(0x7f0000000140), 0x0)
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000380)={0x0, 0x1, @stop_pts=0xfff})
write$P9_RFLUSH(r0, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x0, [], [{0x7, 0x0, 0x40, 0x200, 0x401, 0x3d}, {0x0, 0x0, 0xcf97, 0x5fd, 0x7, 0x1ff}], [[], [], [], [], [], []]})

[  645.262316][T28521] binder: 28511:28521 ioctl c0306201 20007000 returned -14
19:54:51 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x700, 0x0, 0x0})

[  645.348957][T28523] binder: 28522:28523 got transaction with unaligned buffers size, 12
19:54:51 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000140)={0x21})

[  645.441207][T28523] binder: BINDER_SET_CONTEXT_MGR already set
[  645.480537][T28523] binder: 28522:28523 ioctl 40046207 0 returned -16
[  645.521201][T28530] binder: 28529:28530 ioctl c0306201 20007000 returned -14
19:54:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  645.629144][T28534] binder: 28529:28534 ioctl c0306201 20007000 returned -14
[  645.679840][   T26] audit: type=1326 audit(1555358091.535:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28493 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0
19:54:51 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
ioctl$KDSETMODE(r1, 0x4b3a, 0xffc0)
r2 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000004c0), 0x49249249249274a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
recvfrom$packet(r1, &(0x7f00000000c0), 0x0, 0x40, &(0x7f0000000140)={0x11, 0x1c, r3, 0x1, 0xfffffffffffffffd}, 0x14)

19:54:51 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:51 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x3, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000080))
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r2 = socket(0x400000000010, 0x3, 0x0)
write(r2, &(0x7f00000002c0)="2400000021002551075c0165ff0ffc020200000300100f0000e1000c080018008002a000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464000000000000000085ea2b85d32b3583d87124da3b0861e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801f1cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1ac968ce510c7a70723741b34981d1b182deb7904", 0xe0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x7, 0x1d, 0x6, 0x13, 0xa, 0xffffffffffffffff, 0x6, 0x140, 0xffffffffffffffff})
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)

19:54:51 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0xa00, 0x0, 0x0})

19:54:51 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  645.974016][T28557] binder: 28555:28557 ioctl c0306201 20007000 returned -14
[  645.984799][T28551] binder: BINDER_SET_CONTEXT_MGR already set
19:54:51 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x1, 0x180, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x88ca, 'irlan0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', 'vcan0\x00', @broadcast, [0xff, 0x0, 0xff], @link_local, [0x0, 0x80000000000000], 0xa0, 0xa0, 0xf0, [@connlabel={'connlabel\x00', 0x8, {{0xff, 0x3}}}]}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x1f8)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/fib_triestat\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
write$P9_RXATTRCREATE(r1, &(0x7f0000000080)={0x7, 0x21, 0x1}, 0x7)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8000000, 0x130010, r1, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x5, 0xffffffffffffebc7, 0x5, 0x200})

[  646.073826][T28551] binder: 28550:28551 ioctl 40046207 0 returned -16
19:54:52 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet(0x10, 0x2, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x200000)
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000080)={0x3, 0x100001, [0x3, 0x5, 0x78, 0x8, 0xffffffffffffffff, 0x4d, 0xf214, 0x1]})
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000140)={0x2, 0x0, [0x0, 0x0]})
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000200), 0x4)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r3, 0x302, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x6}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x19}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x80)
truncate(&(0x7f0000000100)='.\x00', 0x3)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="240000005e0007041dfffd946f610500070000001d000000ff000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

19:54:52 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4800, 0x0, 0x0})

19:54:52 executing program 2:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0)
ioctl(r0, 0x0, 0x0)

19:54:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  646.261260][T28565] cannot load conntrack support for proto=7
[  646.315935][T28571] binder: 28570:28571 ioctl c0306201 20007000 returned -14
[  646.319169][T28572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  646.367580][T28579] binder: 28570:28579 ioctl c0306201 20007000 returned -14
[  646.381207][T28565] cannot load conntrack support for proto=7
19:54:52 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0})
close(r0)
r2 = dup(r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=[@clear_death={0x40046304, 0x0, 0x40046307}], 0x0, 0x0, 0x0})
ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0xf, {0x18447b3, 0x8000, 0x7f, 0x3}, {0x1, 0x7f, 0x6, 0x16fc}, {0xffffffff7fffffff, 0x73a}})
getpeername$inet(r2, &(0x7f0000000000), &(0x7f0000000080)=0x10)

[  646.485095][T28582] binder: BINDER_SET_CONTEXT_MGR already set
[  646.502934][T28583] binder_alloc: 28580: binder_alloc_buf, no vma
19:54:52 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00')
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0xd064, @local, 0xfffffffffffffffd}}, {{0xa, 0x4e23, 0x100000001, @dev={0xfe, 0x80, [], 0x21}, 0x101}}}, 0x108)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0add1f033c273f319bd070")
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000100))
socket$inet_smc(0x2b, 0x1, 0x0)

[  646.526534][T28582] binder: 28580:28582 ioctl 40046207 0 returned -16
19:54:52 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0x0, 0x7ff}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="00befa20"], 0x1}}, 0x0)

[  646.615012][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
19:54:52 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:52 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4c00, 0x0, 0x0})

19:54:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:52 executing program 2:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000003400)='/dev/adsp#\x00', 0x2a27, 0x10b000)
getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f0000003440), &(0x7f0000003480)=0x4)
connect$ax25(r0, &(0x7f0000000100)={{0x3, @netrom, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote, @null, @rose, @null, @rose]}, 0x48)

19:54:52 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000001c0)=0x6, &(0x7f0000000280)=0x2)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='tmpfs\x00', 0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]})

19:54:52 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x16, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20180, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000040)={0xa, 0x7, 0x800, 0xfff, 'syz1\x00', 0x80})
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f1c3c12a41d88b070")
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x18)

[  646.898111][T28601] overlayfs: failed to resolve './file1': -2
[  646.914616][T28602] binder: 28600:28602 ioctl c0306201 20007000 returned -14
19:54:52 executing program 2:
r0 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8f, 0x4000)
ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f)
sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @mcast1}, 0x80, 0x0}, 0x0)

19:54:52 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4a8c0, 0x0)
statx(r0, &(0x7f0000000080)='./file0\x00', 0x4100, 0xfff, &(0x7f0000000200))
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f00000000c0)={0x1, [0x8, 0x5, 0x0, 0x1, 0xffffffffffffffd0, 0x6, 0x1, 0x80000000, 0x1, 0x1d4, 0x400, 0x80000000, 0x1, 0x80, 0x20, 0x6d1, 0xe965, 0xa1, 0xffff, 0x6, 0x4, 0x8, 0x3, 0x3, 0x3ff, 0x5, 0x3, 0xbd, 0x3, 0x4, 0x0, 0x5, 0x100000000, 0xff, 0x3f, 0x7275, 0x80, 0x6, 0x100, 0x7fff, 0xd5, 0x54, 0x3, 0x40, 0x6, 0xfffffffffffffff8, 0x3, 0x13], 0x3})
r1 = socket$kcm(0xa, 0x5, 0x11)
sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000180)=@nl=@unspec={0x2001001000000000}, 0x80, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000009431"], 0x14}, 0x0)

[  646.957104][T28614] binder: 28600:28614 ioctl c0306201 20007000 returned -14
19:54:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x8)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/224)
r1 = socket$kcm(0x10, 0x7, 0x0)
sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x5a, &(0x7f0000000380), 0x38d3bb9bbbb43da, 0x0, 0xffffffffffffff0b}, 0xfffffffffffff7fa)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e)
ioctl$NBD_DISCONNECT(0xffffffffffffffff, 0xab08)

19:54:52 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6800, 0x0, 0x0})

19:54:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  647.101896][T28625] binder: 28624:28625 ioctl c0306201 20007000 returned -14
19:54:53 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x28202)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0)
accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800)

[  647.345522][T28640] syz-executor.0 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  647.372412][T28640] CPU: 1 PID: 28640 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  647.380418][T28640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  647.391501][T28640] Call Trace:
[  647.394944][T28640]  dump_stack+0x172/0x1f0
[  647.399596][T28640]  dump_header+0x10f/0xb6c
[  647.404279][T28640]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  647.410916][T28640]  ? ___ratelimit+0x60/0x595
[  647.416185][T28640]  ? do_raw_spin_unlock+0x57/0x270
[  647.421565][T28640]  oom_kill_process.cold+0x10/0x15
[  647.427655][T28640]  out_of_memory+0x79a/0x1280
[  647.433462][T28640]  ? lock_downgrade+0x880/0x880
[  647.438852][T28640]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  647.445573][T28640]  ? oom_killer_disable+0x280/0x280
[  647.451572][T28640]  ? find_held_lock+0x35/0x130
[  647.457003][T28640]  mem_cgroup_out_of_memory+0x1ca/0x230
[  647.463843][T28640]  ? memcg_event_wake+0x230/0x230
[  647.470142][T28640]  ? do_raw_spin_unlock+0x57/0x270
[  647.476210][T28640]  ? _raw_spin_unlock+0x2d/0x50
[  647.481538][T28640]  try_charge+0x102c/0x15c0
[  647.486157][T28640]  ? find_held_lock+0x35/0x130
[  647.491413][T28640]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  647.497079][T28640]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  647.503283][T28640]  ? find_held_lock+0x35/0x130
[  647.508569][T28640]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  647.514809][T28640]  __memcg_kmem_charge_memcg+0x7c/0x130
[  647.520402][T28640]  ? memcg_kmem_put_cache+0xb0/0xb0
[  647.525788][T28640]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  647.531547][T28640]  __memcg_kmem_charge+0x136/0x300
[  647.537061][T28640]  __alloc_pages_nodemask+0x437/0x7e0
[  647.542644][T28640]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  647.549185][T28640]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  647.555118][T28640]  ? __kmalloc_node+0x3d/0x70
[  647.560356][T28640]  ? kasan_unpoison_shadow+0x35/0x50
[  647.566185][T28640]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  647.574955][T28640]  alloc_pages_current+0x107/0x210
[  647.580537][T28640]  ? ___might_sleep+0x163/0x280
[  647.585800][T28640]  __vmalloc_node_range+0x4b0/0x790
[  647.592442][T28640]  __vmalloc+0x44/0x50
[  647.597590][T28640]  ? vmx_vm_alloc+0x44/0x60
[  647.603872][T28640]  vmx_vm_alloc+0x44/0x60
[  647.609461][T28640]  kvm_dev_ioctl+0x1ba/0x15e0
[  647.614523][T28640]  ? kvm_debugfs_release+0x90/0x90
[  647.620694][T28640]  ? __fget+0x35a/0x550
[  647.625054][T28640]  ? kvm_debugfs_release+0x90/0x90
[  647.631506][T28640]  do_vfs_ioctl+0xd6e/0x1390
[  647.636341][T28640]  ? ioctl_preallocate+0x210/0x210
[  647.642827][T28640]  ? smack_file_ioctl+0x196/0x310
[  647.649452][T28640]  ? smack_inode_rename+0x2d0/0x2d0
[  647.655716][T28640]  ? nsecs_to_jiffies+0x30/0x30
[  647.661050][T28640]  ? tomoyo_file_ioctl+0x23/0x30
[  647.666584][T28640]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  647.674043][T28640]  ? security_file_ioctl+0x93/0xc0
[  647.679383][T28640]  ksys_ioctl+0xab/0xd0
[  647.684288][T28640]  __x64_sys_ioctl+0x73/0xb0
[  647.689393][T28640]  do_syscall_64+0x103/0x610
[  647.695403][T28640]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  647.702733][T28640] RIP: 0033:0x458c29
[  647.707446][T28640] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  647.730678][T28640] RSP: 002b:00007fe5bd58ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  647.740000][T28640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  647.749581][T28640] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  647.758484][T28640] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  647.768853][T28640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd58f6d4
[  647.777612][T28640] R13: 00000000004c1788 R14: 00000000004d3f68 R15: 00000000ffffffff
[  647.790795][T28640] memory: usage 307200kB, limit 307200kB, failcnt 49
[  647.799383][T28640] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  647.808088][T28640] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  647.816229][T28640] Memory cgroup stats for /syz0: cache:0KB rss:271320KB rss_huge:262144KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:271408KB inactive_file:0KB active_file:0KB unevictable:4KB
[  647.840528][T28640] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26172,uid=0
[  647.860469][T28640] Memory cgroup out of memory: Killed process 26172 (syz-executor.0) total-vm:72580kB, anon-rss:6312kB, file-rss:34816kB, shmem-rss:0kB
[  647.880507][ T1043] oom_reaper: reaped process 26172 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[  647.888897][T28610] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  647.911695][T28610] CPU: 1 PID: 28610 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  647.920329][T28610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  647.931848][T28610] Call Trace:
[  647.935436][T28610]  dump_stack+0x172/0x1f0
[  647.940307][T28610]  dump_header+0x10f/0xb6c
[  647.952927][T28610]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  647.959279][T28610]  ? ___ratelimit+0x60/0x595
[  647.964422][T28610]  ? do_raw_spin_unlock+0x57/0x270
[  647.970630][T28610]  oom_kill_process.cold+0x10/0x15
[  647.976316][T28610]  out_of_memory+0x79a/0x1280
[  647.981492][T28610]  ? oom_killer_disable+0x280/0x280
[  647.987129][T28610]  ? find_held_lock+0x35/0x130
[  647.993274][T28610]  mem_cgroup_out_of_memory+0x1ca/0x230
[  647.999366][T28610]  ? memcg_event_wake+0x230/0x230
[  648.005451][T28610]  ? do_raw_spin_unlock+0x57/0x270
[  648.011129][T28610]  ? _raw_spin_unlock+0x2d/0x50
[  648.016142][T28610]  try_charge+0xa87/0x15c0
[  648.020923][T28610]  ? find_held_lock+0x35/0x130
[  648.026427][T28610]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  648.033051][T28610]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  648.039707][T28610]  ? kasan_check_read+0x11/0x20
[  648.045707][T28610]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  648.051943][T28610]  mem_cgroup_try_charge+0x24d/0x5e0
[  648.057618][T28610]  mem_cgroup_try_charge_delay+0x1f/0xa0
[  648.063684][T28610]  wp_page_copy+0x408/0x1740
[  648.068377][T28610]  ? find_held_lock+0x35/0x130
[  648.073448][T28610]  ? pmd_pfn+0x1d0/0x1d0
[  648.078062][T28610]  ? lock_downgrade+0x880/0x880
[  648.082933][T28610]  ? swp_swapcount+0x540/0x540
[  648.088174][T28610]  ? kasan_check_read+0x11/0x20
[  648.093459][T28610]  ? do_raw_spin_unlock+0x57/0x270
[  648.098745][T28610]  do_wp_page+0x48e/0x1500
[  648.103844][T28610]  ? finish_mkwrite_fault+0x4f0/0x4f0
[  648.110193][T28610]  __handle_mm_fault+0x22e8/0x3ec0
[  648.116544][T28610]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  648.122465][T28610]  ? find_held_lock+0x35/0x130
[  648.128156][T28610]  ? handle_mm_fault+0x322/0xb30
[  648.133353][T28610]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  648.139967][T28610]  ? kasan_check_read+0x11/0x20
[  648.145562][T28610]  handle_mm_fault+0x43f/0xb30
[  648.151104][T28610]  __do_page_fault+0x5ef/0xda0
[  648.156860][T28610]  do_page_fault+0x71/0x581
[  648.162183][T28610]  ? page_fault+0x8/0x30
[  648.166962][T28610]  page_fault+0x1e/0x30
[  648.172059][T28610] RIP: 0033:0x40de98
[  648.176195][T28610] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf 2c e2 4b 00 31 c0 e8 83 3a ff ff 31 ff e8 cc 36 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d ce 25 64 00
[  648.198029][T28610] RSP: 002b:00007fff82f99c40 EFLAGS: 00010246
[  648.206362][T28610] RAX: 000000004c0cc88e RBX: 00000000eb5f6ea8 RCX: 0000001b2d120000
[  648.222416][T28610] RDX: 0000000000000000 RSI: 000000000000088e RDI: ffffffff4c0cc88e
[  648.232818][T28610] RBP: 0000000000000000 R08: 000000004c0cc88e R09: 000000004c0cc892
[  648.242373][T28610] R10: 00007fff82f99dd0 R11: 0000000000000246 R12: 000000000073bf88
[  648.252228][T28610] R13: 0000000080000000 R14: 00007fe5bf5b1008 R15: 000000000000000f
[  648.264597][T28610] memory: usage 300936kB, limit 307200kB, failcnt 49
[  648.273467][T28610] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  648.282116][T28610] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  648.290166][T28610] Memory cgroup stats for /syz0: cache:0KB rss:265112KB rss_huge:256000KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265172KB inactive_file:0KB active_file:0KB unevictable:4KB
[  648.316096][T28610] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26163,uid=0
[  648.335403][T28610] Memory cgroup out of memory: Killed process 26163 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34944kB, shmem-rss:0kB
[  648.355365][ T1043] oom_reaper: reaped process 26163 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
19:54:54 executing program 1:
r0 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x4005eed)
write$input_event(r0, &(0x7f0000000040)={{0x0, 0x7530}}, 0x18)
fsync(r0)
fallocate(r0, 0x1000000000000020, 0x2000, 0x1f)

19:54:54 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r0, &(0x7f0000000700)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in6=@mcast2}}, 0xe8)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x381100, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000040)=0x2, 0x8)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x41)

19:54:54 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:54 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x28202)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0)
accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800)

19:54:54 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6c00, 0x0, 0x0})

[  648.489257][T28654] binder_transaction: 30 callbacks suppressed
[  648.489273][T28654] binder: 28653:28654 transaction failed 29189/-22, size 0-0 line 2995
[  648.520586][T28654] binder: 28653:28654 ioctl c0306201 20007000 returned -14
[  648.523948][T28659] binder: 28649:28659 transaction failed 29201/-22, size 0-0 line 3211
[  648.531705][ T7967] binder_release_work: 29 callbacks suppressed
[  648.531713][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  648.563498][T28666] binder: 28653:28666 transaction failed 29201/-22, size 0-0 line 3211
[  648.582941][T28666] binder: 28653:28666 ioctl c0306201 20007000 returned -14
[  648.591595][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  648.618634][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:54:54 executing program 1:
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xfe)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0)
write$binfmt_elf64(r1, &(0x7f0000004000)=ANY=[@ANYRESHEX, @ANYRESOCT=0x0], 0x1a6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(r0, r1, 0x80000)
sendfile(r1, r1, &(0x7f00000001c0), 0xa198)

19:54:54 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x2, 0x63f)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x40004, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000080)={0x4, 0xc47a})
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0xfffffffffffffffd, 0x8)

[  648.635098][T28659] binder: BINDER_SET_CONTEXT_MGR already set
19:54:54 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7400, 0x0, 0x0})

[  648.699012][T28659] binder: 28649:28659 ioctl 40046207 0 returned -16
[  648.699053][T28667] binder_alloc: 28649: binder_alloc_buf, no vma
19:54:54 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x5f5e0ff}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x2e6, &(0x7f00001a7f05)=""/251}, 0x48)
r0 = syz_open_dev$swradio(0x0, 0x1, 0x2)
ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f00000000c0))
getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@local, @initdev}, &(0x7f0000000080)=0xc)

[  648.841561][T28678] binder: 28674:28678 transaction failed 29189/-22, size 0-0 line 2995
19:54:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={<r1=>0x0}, &(0x7f0000000140)=0xc)
waitid(0x2, r1, &(0x7f0000000280), 0x2, &(0x7f00000003c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r2, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write(r3, &(0x7f0000000040)='V', 0x1)
r4 = accept(r2, 0x0, 0x0)
recvmsg(r4, &(0x7f00000013c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1}, 0x0)

[  648.932981][T28667] binder: 28649:28667 transaction failed 29189/-3, size 0-0 line 3148
[  648.942269][T28678] binder: 28674:28678 ioctl c0306201 20007000 returned -14
[  648.966508][   T12] binder: undelivered TRANSACTION_ERROR: 29189
19:54:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:54 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x37a)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x420140, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x3, &(0x7f00000003c0)={&(0x7f0000000380)=@ipmr_getroute={0x1c, 0x1a, 0x525, 0x0, 0x0, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}}, 0x1c}}, 0x0)
r2 = accept4(r0, &(0x7f0000000080)=@ethernet={0x0, @link_local}, &(0x7f0000000000)=0x80, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10)

[  649.016461][T28678] binder: 28674:28678 transaction failed 29189/-22, size 0-0 line 2995
[  649.024349][   T12] binder: undelivered TRANSACTION_ERROR: 29189
19:54:54 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:55 executing program 3:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r0=>0x0}, &(0x7f0000000080)=0xc)
r1 = syz_open_procfs(r0, &(0x7f0000000000)='status\x00')
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000001480)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000056}, 0xc, &(0x7f0000001440)={&(0x7f0000001140)=ANY=[@ANYBLOB="ef000000", @ANYRES16=r2, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x800}, 0x40081)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)={0x0, 0xff, 0xffffffffffffffff})
socket$packet(0x11, 0x2, 0x300)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)

[  649.073319][T28678] binder: 28674:28678 ioctl c0306201 20007000 returned -14
[  649.113530][   T12] binder: undelivered TRANSACTION_ERROR: 29189
[  649.155518][T28689] binder_transaction: 13 callbacks suppressed
[  649.155530][T28689] binder: 28688:28689 got transaction with unaligned buffers size, 12
[  649.183424][T28689] binder: 28688:28689 transaction failed 29201/-22, size 0-0 line 3211
19:54:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7a00, 0x0, 0x0})

[  649.233465][   T12] binder: undelivered TRANSACTION_ERROR: 29201
[  649.243641][T28700] binder: 28688:28700 got transaction with unaligned buffers size, 12
[  649.252431][T28700] binder: 28688:28700 transaction failed 29201/-22, size 0-0 line 3211
[  649.347883][T28703] binder: 28702:28703 got transaction with unaligned buffers size, 12
[  649.433826][T28703] binder: 28702:28703 transaction failed 29201/-22, size 0-0 line 3211
[  649.462985][   T17] binder: undelivered TRANSACTION_ERROR: 29201
19:54:55 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e)
r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x28202)
setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4)
sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0)
accept4$llc(r2, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80800)

19:54:55 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800)
connect(r0, &(0x7f0000000280)=@x25={0x9, @remote={[], 0x0}}, 0x80)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0x18e, 0x100)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000380)={0x0, 0xefc, 0x8, &(0x7f0000000340)=0x5})
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f00000003c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9e197898abf4df02f3d84060e0072185170877446dd5be9ed4c4bc583bc9eb0c678dae5588a4851f8a9a7106f9cd6a9d7b393ca7ecacb1da56b1f6664d6d6fe8b5359c9dd3596638dd791e459ba61d03ee95cd854f4ee195df83c015410056ec41cb763d9ca942b52fa5aa615ac9d32f29d9429fc2d730e581a98035f38b9269ed60b4d2dd91cce41cce0704e76addce0e401d7e4be4803efecfa56b408e67b076e92589af0ebc529738763261839b8e72e31db6c0d488df9bc294d990ecd61d0f0c9a75f06611ad57402793e8a66bc4527580d6e35417a7048f54806f2d1939d07e6f2d409c28f0b345f3"], 0x0, 0x0, 0x0})

19:54:55 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff)
mount(&(0x7f0000000040)=@nullb='[d::],0::.:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0)
r1 = getgid()
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xe8)
mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x8, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@rq={'rq'}}, {@rq={'rq', 0x3d, 0x80000000}}, {@timeout={'timeout', 0x3d, 0x9}}, {@rq={'rq', 0x3d, 0x69f80000}}, {@common=@dfltgid={'dfltgid', 0x3d, r1}}, {@rq={'rq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x7fffffff}}, {@sq={'sq', 0x3d, 0x7}}, {@timeout={'timeout', 0x3d, 0xfff}}], [{@uid_lt={'uid<', r2}}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'ceph\x00'}}, {@obj_user={'obj_user', 0x3d, 'vboxnet1,'}}]}})

[  649.476856][T28703] binder: 28702:28703 ioctl c0306201 20007000 returned -14
19:54:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  649.505646][T28709] libceph: resolve '0' (ret=-3): failed
[  649.530044][T28711] binder: 28702:28711 transaction failed 29189/-22, size 0-0 line 2995
[  649.538883][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  649.545984][T28709] libceph: parse_ips bad ip '[d::],0::.'
[  649.557712][T28711] binder: 28702:28711 ioctl c0306201 20007000 returned -14
[  649.578174][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:54:55 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7, 0x82)
bind$rose(r0, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100))
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x9)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x22)

19:54:55 executing program 3:
r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)="bbd175bf9085c268dfe23fbfe4fe08078059d6b8d4ba63a18d0f874e8f0a79faf16b175007fa84058f6f3437bdaef92d4c8c3a51391dda78980978e21d46560469b9709ff3196947bacd5fc13ebf98", 0x4f)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x200000000004e23}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='dctcp\x00', 0x6)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf011, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

19:54:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x1000000, 0x0, 0x0})

[  649.734492][T28718] binder: 28716:28718 got transaction with unaligned buffers size, 12
[  649.776571][T28726] binder: 28724:28726 got transaction with unaligned buffers size, 12
[  649.834954][T28730] binder: 28716:28730 got transaction with unaligned buffers size, 12
[  649.841006][T28726] binder: 28724:28726 ioctl c0306201 20007000 returned -14
19:54:55 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7684, 0x40080)
ioctl$KIOCSOUND(r1, 0x4b2f, 0xffffffffffffdb5b)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
ioctl$TUNSETPERSIST(r2, 0x400454de, 0x507100)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x4100, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40002004}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r4, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40040)

19:54:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  649.932240][T28732] binder: 28724:28732 ioctl c0306201 20007000 returned -14
19:54:55 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:55 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x2000000, 0x0, 0x0})

[  650.085196][T28741] binder: 28736:28741 got transaction with unaligned buffers size, 12
[  650.110728][T28742] binder: 28736:28742 got transaction with unaligned buffers size, 12
19:54:56 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00')

19:54:56 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x62fc, &(0x7f00000001c0)="0adc4713438cf7100240e334ddde0f5c7596fae7a8368c46c1aa2cb8c063e19afede081f123c12c0ca20a10aed7c2fb6ff8c3c2cf9")
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="2321202e2f66696c6530207573657226656d30200a79e5906d0622618816c57d30ff8224fc2d2ae9560bc62c1aaeb5176887ad5be5f331fb70304fd27ab91b48459debcdf071addeebbd995aab822262f4e0d5e797f2d5cc3c61615a2a83a47afd1099bf4e58e5cc07a2269fc21197751b9215c6dcf6195d76116f3ec6ab26ea249807b8cbc2393cf57dc62ab9ce54e152db9b69e057b4db6f9f658d7918a7a7250a6edff58f013a7ca516286d5298ed"], 0xb0)
r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x80, 0x10000)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100))
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00')
write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x73, 0x4b, 0x1}, 0x7)
close(r2)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000140)=0x4)

19:54:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  650.193797][T28745] binder: 28744:28745 got transaction with unaligned buffers size, 12
[  650.246623][T28745] binder: 28744:28745 ioctl c0306201 20007000 returned -14
19:54:56 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0xfffffffffffffffc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1010000)

[  650.351029][T28758] binder: 28744:28758 ioctl c0306201 20007000 returned -14
[  650.370059][T28754] binder: 28753:28754 got transaction with unaligned buffers size, 12
19:54:56 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x3000000, 0x0, 0x0})

19:54:56 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  650.475071][T28764] binder: 28763:28764 ioctl c0306201 20007000 returned -14
[  650.553265][T28767] binder: 28763:28767 ioctl c0306201 20007000 returned -14
19:54:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070")
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0xd, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x80}, 0x8)
dup3(r3, r2, 0x0)
close(r1)
r4 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r4, 0xc0044306, &(0x7f0000000040)=0x800000000)
modify_ldt$write2(0x11, &(0x7f0000000100)={0x7, 0x20000000, 0x4400, 0x4f7, 0x4, 0x7fffffff, 0x70dc9472, 0x2d1, 0x101, 0x401}, 0x10)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000000c0)='nlmon0\x00')
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8000, 0x2, 0x2, 0x4, 0x2, 0xffffffff}, 0x20)

19:54:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:56 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4000000, 0x0, 0x0})

19:54:56 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000000)={0x3, 0x3})
socket$inet6(0xa, 0x80a, 0x100000001)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0)
write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

[  650.714507][T28776] binder: 28775:28776 ioctl c0306201 20007000 returned -14
19:54:56 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  650.790126][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  650.825834][T28788] binder: 28775:28788 ioctl c0306201 20007000 returned -14
[  650.838074][T28787] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
19:54:56 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x5000000, 0x0, 0x0})

[  650.933538][T28787] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  651.011514][T28800] binder: 28799:28800 ioctl c0306201 20007000 returned -14
[  651.044582][T28806] binder: 28799:28806 ioctl c0306201 20007000 returned -14
19:54:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
close(r1)
r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x356, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000400)=0x8)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x7f, 0x2, 0x1, 0x2}, 0x10)
r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200000)
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x40, 0x1, 0x1}}, 0x14)
pread64(r3, &(0x7f0000000140)=""/204, 0xfffffcce, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e24, 0x6, @mcast1, 0x2}}, 0x0, 0x0, 0x0, "46e1926dab7deb42759e3bfa31c647524400eeba313558cc3355caec239640c01a75105978c2ec5eba5c5602857aaf444940e1c6161bf3a3697647a423db621f0e2de2a1609cfa04efcd36e844d208af"}, 0xd8)

19:54:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:57 executing program 1:
creat(&(0x7f0000000340)='./file0\x00', 0x60)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffbffeffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x806, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0)

19:54:57 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6000000, 0x0, 0x0})

19:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:57 executing program 3:
r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x400)
ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000000c0)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)}, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0xced)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7d8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))

19:54:57 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20000000)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
pipe2(0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r1 = fcntl$dupfd(r0, 0x0, r0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0xffffffffffffff53, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0x0, [0x9c00]}}, 0xffffffffffffffdf)

[  651.227141][T28821] binder: 28818:28821 ioctl c0306201 20007000 returned -14
[  651.243985][T28815] binder: BINDER_SET_CONTEXT_MGR already set
[  651.256695][T28815] binder: 28814:28815 ioctl 40046207 0 returned -16
[  651.270011][T28831] binder: 28818:28831 ioctl c0306201 20007000 returned -14
19:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:57 executing program 2:
r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000640)={0x2, 0x0, @local}, &(0x7f0000000680)=0x10, 0x80800)
sendto$inet(r0, &(0x7f00000006c0)="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", 0x1000, 0x8005, &(0x7f00000016c0)={0x2, 0x4e20, @empty}, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
close(r2)
socket$netlink(0x10, 0x3, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x200004)
r4 = socket$inet6(0xa, 0x2100000000000002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000100)={<r5=>0x0, 0x1d, "e262cb2b1fa00b75948deb9d69f24153f1a5982697223bdc0eb778996d"}, &(0x7f0000000140)=0x25)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x9, 0x30, 0x2, 0x1}, &(0x7f0000000200)=0x18)
write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7ff, 0x7f, 0x5f148ac0, 0x6, 0x3, 0x3, 0x4, 0x29d, 0x40, 0x2e6, 0x7, 0x0, 0x38, 0x2, 0x5, 0x80000001, 0x9}, [{0x0, 0xaa, 0x1f, 0x4, 0x1, 0x2a, 0x1, 0x7}], "33c88c3d56c3cdee8331c7ab180935f66295d6379e2c78324f8d606dec532f8cba06e18971aed710702710a2781a2a76c9da6cf6b05deaaffadcdbd33c0c1fa5d80777a1d2678a96e73ee020c204b28c665adb83ec121df0c45eaeb620ed45f2ff6b54d48b294ba57056e997be10cae3fbc86f95ba70d6901f098e695f10a4cfd453", [[], [], []]}, 0x3fa)
read$rfkill(r3, &(0x7f0000000000), 0x8)
bind$tipc(r3, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendfile(r2, r3, 0x0, 0x8000fffffffe)

19:54:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:57 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7000000, 0x0, 0x0})

19:54:57 executing program 3:
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x6)
connect$rose(r0, &(0x7f00000001c0)=@full={0xb, @dev, @null, 0x0, [@bcast, @bcast, @bcast, @bcast, @netrom, @rose]}, 0x40)
mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='hfs\x00', 0x10e0c1, &(0x7f00000000c0)='\x00')

19:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  651.480576][T28845] binder: 28843:28845 ioctl c0306201 20007000 returned -14
[  651.535913][T28852] binder: 28843:28852 ioctl c0306201 20007000 returned -14
19:54:57 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0xa000000, 0x0, 0x0})

19:54:57 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0e0000dcbd78f08b000000")
syz_emit_ethernet(0x3a, &(0x7f0000000300)={@local, @broadcast, [{[], {0x8100, 0x0, 0xfffffffffffffffd}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x0, 0x7b4]})

19:54:57 executing program 2:
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000000)={@loopback, @initdev, <r0=>0x0}, &(0x7f0000000040)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x9, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x18}]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

19:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:57 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
sendmsg$rds(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x10001)

[  651.723358][T28864] binder: 28863:28864 ioctl c0306201 20007000 returned -14
[  651.821932][T28874] binder: 28863:28874 ioctl c0306201 20007000 returned -14
19:54:57 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0xfffffffffefffffc, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ioctl$TIOCSTI(r0, 0x40186f40, 0x740300)

19:54:57 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x10000000, 0x0, 0x0})

[  651.874537][T28881] binder: BINDER_SET_CONTEXT_MGR already set
[  651.880592][T28881] binder: 28868:28881 ioctl 40046207 0 returned -16
19:54:57 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x100000890f, &(0x7f0000000080)="0adc1f4b050000319bd070")
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r1, &(0x7f0000498000)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000010000000000000000200000000"], 0x20}}, 0x0)

19:54:57 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00')
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000140)={0x3, 0x1})
preadv(r1, &(0x7f0000000100), 0x2df, 0x80000000000)
setsockopt(r0, 0x3, 0x3, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x60000000})

19:54:57 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:57 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x1, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000001c0)={0x0, {0x4, 0x10001}})
syz_emit_ethernet(0x140, &(0x7f0000000640)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0x8}}}}}}, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x40000, 0x0)
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000140)=0x10, 0x4)
setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000200)=@fragment={0x7f, 0x0, 0x8, 0x0, 0x0, 0x1f, 0x64}, 0x8)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)

[  652.024250][T28890] binder: 28889:28890 ioctl c0306201 20007000 returned -14
19:54:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  652.075223][T28895] binder: 28889:28895 ioctl c0306201 20007000 returned -14
[  652.076550][T28894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
19:54:58 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'nlmon0\x00', {0x2, 0x4e22, @multicast2}})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={<r3=>0x0, 0x10000}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r3, @in={{0x2, 0x4e22, @remote}}}, &(0x7f0000000180)=0x84)
r4 = dup2(r2, r1)
epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r4)
signalfd4(r4, &(0x7f0000000000), 0x8, 0x800)
fcntl$getownex(r1, 0x10, &(0x7f0000000080))

19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x48000000, 0x0, 0x0})

19:54:58 executing program 2:
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x40101)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1'])
mkdir(&(0x7f0000000140)='./file0/file1/file0\x00', 0x0)
rename(&(0x7f0000000200)='./file0/file1/file0\x00', &(0x7f00000001c0)='./file0/file0\x00')
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000240))

19:54:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:58 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:58 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x2800, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000400)={<r1=>0x0, 0x18, "9e8b03f434be399f26c391575179f870b814393dffeefa2d"}, &(0x7f0000000440)=0x20)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000480)={r1, 0x5, 0x81, 0x100, 0x5, 0xf5ec}, 0x14)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400042, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x8, 0x9, 0xfffffffffffffffd, <r5=>0x0}, &(0x7f0000000280)=0x10)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x5)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000002c0)={r5, 0x3f}, 0x8)
r6 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x40)
getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f00000006c0)=""/6, &(0x7f0000000700)=0xeb)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000300)={0x0, @speck128, 0x0, "e7e90dbfc4d5d840"})
getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0501004b00000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r4, &(0x7f00000004c0)="f8d63c339a15ab6187b74912b2509457d31d7ff78351e0e6e43d47d1dad3cf6229f92d1fccfcc8fc04fb3222da2647361fc6f3053eb59e13c668803c35765b5237e2cea0365e957c83fc2e761ddf1038820f5d5027dfc820cfa90cf73e4ae6c02178f60aea17d0f2dbeb77f302f830f706f9949c0c4df837c8329e9c6cf79d91e56cf98b16c36fcc08588505cbc79f3307567386e95c", &(0x7f0000000740)=""/4096}, 0x18)

[  652.296218][T28914] binder: 28913:28914 ioctl c0306201 20007000 returned -14
[  652.381333][T28928] binder: 28913:28928 ioctl c0306201 20007000 returned -14
19:54:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000100))
write(r0, &(0x7f0000000040)="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", 0x1000)
r1 = syz_open_dev$usbmon(&(0x7f0000001040)='/dev/usbmon#\x00', 0x9, 0x8000)
ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f00000010c0)={0xcfc9, 0xffff})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000001080)=0x20, 0x4)

19:54:58 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:58 executing program 3:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
sendmsg$rds(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000700)=""/198, 0xc6}, {&(0x7f0000000800)=""/167, 0xa7}, {&(0x7f00000008c0)=""/80, 0x50}, {&(0x7f0000000940)=""/108, 0x6c}], 0x5, &(0x7f0000000b80)=[@cswp={0x58, 0x114, 0x7, {{0xfffffffffffffe00, 0x8f}, &(0x7f0000000080)=0x8001, &(0x7f0000000a40)=0xfffffffffffffff8, 0x0, 0x8000, 0x6, 0xbe8c, 0x2, 0x5}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0xfffffffffffffa26}, &(0x7f0000000a80)=0xc5b, &(0x7f0000000ac0)=0x8, 0xfffffffffffffff7, 0x8000, 0xfffffffffffffff8, 0x1, 0x42, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x5a0, 0x1000}, &(0x7f0000000b00)=0x6, &(0x7f0000000b40)=0x6, 0xffffffffffffff81, 0x4, 0x7, 0x20, 0x10, 0x4}}], 0x108, 0x8000}, 0x40)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x353, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [], {0x0, 0x1c9c380}})

19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4c000000, 0x0, 0x0})

19:54:58 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)

[  652.577153][T28929] syz-executor.0 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=1000
[  652.610338][T28943] binder: 28942:28943 ioctl c0306201 20007000 returned -14
[  652.628235][T28929] CPU: 0 PID: 28929 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  652.636182][T28929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  652.646251][T28929] Call Trace:
[  652.647512][T28950] binder: 28942:28950 ioctl c0306201 20007000 returned -14
[  652.649645][T28929]  dump_stack+0x172/0x1f0
[  652.649666][T28929]  dump_header+0x10f/0xb6c
[  652.649681][T28929]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  652.649703][T28929]  ? ___ratelimit+0x60/0x595
[  652.676097][T28929]  ? do_raw_spin_unlock+0x57/0x270
[  652.681228][T28929]  oom_kill_process.cold+0x10/0x15
[  652.686799][T28929]  out_of_memory+0x79a/0x1280
[  652.686819][T28929]  ? lock_downgrade+0x880/0x880
[  652.686834][T28929]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  652.686856][T28929]  ? oom_killer_disable+0x280/0x280
[  652.686875][T28929]  ? find_held_lock+0x35/0x130
[  652.696455][T28929]  mem_cgroup_out_of_memory+0x1ca/0x230
[  652.696469][T28929]  ? memcg_event_wake+0x230/0x230
[  652.696489][T28929]  ? do_raw_spin_unlock+0x57/0x270
[  652.696510][T28929]  ? _raw_spin_unlock+0x2d/0x50
[  652.704847][T28946] binder: BINDER_SET_CONTEXT_MGR already set
[  652.708544][T28929]  try_charge+0x102c/0x15c0
[  652.708566][T28929]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  652.708666][T28929]  ? rcu_read_lock_sched_held+0x110/0x130
[  652.743105][T28946] binder: 28937:28946 ioctl 40046207 0 returned -16
[  652.747056][T28954] binder: 28952:28954 ioctl c0306201 20007000 returned -14
[  652.749035][T28929]  ? __alloc_pages_nodemask+0x599/0x7e0
[  652.749051][T28929]  ? find_held_lock+0x35/0x130
[  652.749078][T28929]  __memcg_kmem_charge_memcg+0x7c/0x130
[  652.759613][T28929]  ? memcg_kmem_put_cache+0xb0/0xb0
[  652.759628][T28929]  ? cache_grow_begin+0x594/0x860
[  652.759643][T28929]  ? lockdep_hardirqs_on+0x418/0x5d0
[  652.759658][T28929]  ? trace_hardirqs_on+0x67/0x230
[  652.759680][T28929]  cache_grow_begin+0x5c0/0x860
[  652.770376][T28955] binder: 28952:28955 ioctl c0306201 20007000 returned -14
[  652.772089][T28929]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  652.772175][T28929]  ? __cpuset_node_allowed+0x136/0x540
[  652.772200][T28929]  fallback_alloc+0x1fd/0x2d0
[  652.814842][T28957] binder: 28956:28957 ioctl c0306201 20007000 returned -14
[  652.815945][T28929]  ____cache_alloc_node+0x1be/0x1e0
[  652.815962][T28929]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  652.815981][T28929]  kmem_cache_alloc_node+0xe3/0x710
[  652.816002][T28929]  ? lockdep_hardirqs_on+0x418/0x5d0
[  652.823756][T28958] binder: 28956:28958 ioctl c0306201 20007000 returned -14
[  652.828070][T28929]  ? trace_hardirqs_on+0x67/0x230
[  652.828163][T28929]  copy_process.part.0+0x1d08/0x7980
[  652.828189][T28929]  ? psi_memstall_leave+0x11c/0x180
[  652.869204][T28960] binder: 28959:28960 ioctl c0306201 20007000 returned -14
[  652.873328][T28929]  ? sched_clock+0x2e/0x50
[  652.873359][T28929]  ? psi_memstall_leave+0x12e/0x180
[  652.888280][T28961] binder: 28959:28961 ioctl c0306201 20007000 returned -14
[  652.893399][T28929]  ? find_held_lock+0x35/0x130
[  652.893417][T28929]  ? psi_memstall_leave+0x12e/0x180
[  652.893445][T28929]  ? __cleanup_sighand+0x60/0x60
[  652.893457][T28929]  ? __lock_acquire+0x548/0x3fb0
[  652.893470][T28929]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  652.893503][T28929]  _do_fork+0x257/0xfd0
[  652.934491][T28919] overlayfs: filesystem on './file0' not supported as upperdir
[  652.937700][T28929]  ? fork_idle+0x1d0/0x1d0
[  652.937799][T28929]  ? blkcg_maybe_throttle_current+0x5e2/0xfc0
[  652.937824][T28929]  ? lock_downgrade+0x880/0x880
19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x68000000, 0x0, 0x0})

19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6c000000, 0x0, 0x0})

19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x74000000, 0x0, 0x0})

[  652.976032][T28929]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  652.982283][T28929]  ? blkcg_exit_queue+0x30/0x30
[  652.987139][T28929]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  652.992615][T28929]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  652.998099][T28929]  ? do_syscall_64+0x26/0x610
[  653.002809][T28929]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  653.008902][T28929]  ? do_syscall_64+0x26/0x610
[  653.013607][T28929]  __x64_sys_clone+0xbf/0x150
[  653.018320][T28929]  do_syscall_64+0x103/0x610
[  653.022928][T28929]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
19:54:58 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x200, 0x0)
ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x1)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x404c534a, &(0x7f0000000000)={0x0, 0x0, 0x100004000006, {}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]})
dup3(r2, r1, 0x0)

19:54:58 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7a000000, 0x0, 0x0})

[  653.028845][T28929] RIP: 0033:0x45b5f9
[  653.032741][T28929] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[  653.032749][T28929] RSP: 002b:00007fff82f99bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  653.032770][T28929] RAX: ffffffffffffffda RBX: 00007fe5bd58f700 RCX: 000000000045b5f9
[  653.032778][T28929] RDX: 00007fe5bd58f9d0 RSI: 00007fe5bd58edb0 RDI: 00000000003d0f00
[  653.032785][T28929] RBP: 00007fff82f99de0 R08: 00007fe5bd58f700 R09: 00007fe5bd58f700
[  653.032792][T28929] R10: 00007fe5bd58f9d0 R11: 0000000000000202 R12: 0000000000000000
[  653.032800][T28929] R13: 00007fff82f99c8f R14: 00007fe5bd58f9c0 R15: 000000000073bfac
[  653.043657][T28929] memory: usage 307200kB, limit 307200kB, failcnt 103
[  653.105624][T28965] binder: 28963:28965 ioctl c0306201 20007000 returned -14
[  653.142642][T28966] binder: 28963:28966 ioctl c0306201 20007000 returned -14
[  653.163062][T28929] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  653.173733][T28929] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  653.193199][T28929] Memory cgroup stats for /syz0: cache:0KB rss:269928KB rss_huge:260096KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:270068KB inactive_file:0KB active_file:0KB unevictable:4KB
[  653.228707][T28929] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26182,uid=0
[  653.258284][T28929] Memory cgroup out of memory: Killed process 26182 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  653.280651][ T1043] oom_reaper: reaped process 26182 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
19:54:59 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:59 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x100000000000000, 0x0, 0x0})

19:54:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x80000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000200)=0x6)
write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a314e8952f4d8fd4f22b0e6d7217b5693c6b7ee65912ed9e214d58265571805304247edf1bafe150b8ed573b4b647071f4ddc70e85eaf00d0e59a0b274efe4a78bed8276cc718f436e1bbc36dd9ff8740096703c11aa13e35599a65d538a155ba3946e8de8341714898c48f01b8da9547545af94db509e60ad9b7c3c43f59d3d169c4cfe057d88e739f9e80764af149cd24e416c77fae9326b58ee8cfe2978ce26a6d7008b88cff10a513268c9497f9aa8b7df5a5c40a9950e3b0dc840857e45301c522996d123ff4d4205992aa6aea8f077b64cddaafcec39b"], 0x8c)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x85, 0x4)
r4 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8000, 0x200240)
ioctl$BLKRESETZONE(r4, 0x40101283, &(0x7f0000000140)={0x0, 0x850})
listen(r2, 0x0)
listen(r1, 0x0)
fadvise64(r0, 0x0, 0x1, 0x1)

19:54:59 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/snmp\x00N\xca\xb0\x16\xaf\x16\xf9\xfb+\x1eh\xb6\xce\xd6\x9a>\xaf\xcd\xbaNc\x01\xad\xa2\x12.5|V\x88U\xa4\xbe)_=\x9e\xa7\xf8c\x9e\x11i\x91F0\x8d\xff-2\xdf\x93\x11C\x02HZ#9\xf7V\xdd\f\xb2\xed\xfb\xb5N\xaa/\x16J\xe0f\x12\x15<X\xacH\xef\xd5sTlu\xfa[\n?\xa9\x89\xb3\xb9\\\xf1\x8e\v\x06\\\xab\x0eP\xe4\xec}\xd5\xb8r\xef{2Tt\xd3T/\xbb\x92})m\xe9')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[]}, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000000)={@my=0x1})
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f00000001c0)={0x98, 0xba})
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x500)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x400, {{0xa, 0x4e24, 0x100000001, @dev={0xfe, 0x80, [], 0x27}, 0xffd}}}, 0x88)

19:54:59 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x68000000, 0x0, 0x0})

[  653.385621][T28976] binder: 28975:28976 ioctl c0306201 20007000 returned -14
[  653.417872][T28974] binder: 28973:28974 ioctl c0306201 20007000 returned -14
19:54:59 executing program 2:
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x101040, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r3}}, 0x18)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000001c0)={0xfdfdffff})

19:54:59 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x200000000000000, 0x0, 0x0})

[  653.455594][T28987] binder: 28975:28987 ioctl c0306201 20007000 returned -14
19:54:59 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/dsp\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x21, 0x9, 0x6, 0x2, 0x80, 0x3, 0x110, 0xffffffffffffffff})
poll(&(0x7f0000000000), 0x0, 0xfffffbfffffffffc)
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x1)

19:54:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = dup2(r0, r0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x5, 0x103, 0x0, {0xfffffffffffffffc, 0x6, 0x0, 0x5}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2801, 0x40000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x400000004000000}}]}]}, 0x2c}}, 0x0)

19:54:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  653.549916][T28991] binder_transaction: 59 callbacks suppressed
[  653.549933][T28991] binder: 28989:28991 transaction failed 29201/-22, size 0-0 line 3211
[  653.612807][T28991] binder: 28989:28991 ioctl c0306201 20007000 returned -14
[  653.630006][T29001] openvswitch: netlink: Flow actions attr not present in new flow.
19:54:59 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8002, &(0x7f0000000500)=ANY=[@ANYBLOB='nodots,check=relaxed,dmask=00000000000000000000000,flush,Appraise,\x00'])

[  653.656318][   T12] binder_release_work: 59 callbacks suppressed
[  653.656326][   T12] binder: undelivered TRANSACTION_ERROR: 29201
[  653.671857][T29006] binder: 28989:29006 transaction failed 29189/-22, size 0-0 line 2995
[  653.684225][T29006] binder: 28989:29006 ioctl c0306201 20007000 returned -14
[  653.696421][T29003] binder: 29002:29003 transaction failed 29201/-22, size 0-0 line 3211
19:54:59 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:54:59 executing program 3:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x103, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x9, @win={{0x0, 0x0, 0x3432564e}, 0x0, 0x0, 0x0, 0x0, 0x0}})
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)

19:54:59 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x300000000000000, 0x0, 0x0})

[  653.708877][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[  653.727215][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  653.740678][T29003] binder: BINDER_SET_CONTEXT_MGR already set
19:54:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, 0x0, 0x100)
write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)

[  653.781332][T29010] binder: 29002:29010 transaction failed 29201/-22, size 0-0 line 3211
[  653.838701][T29003] binder: 29002:29003 ioctl 40046207 0 returned -16
[  653.863233][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  653.864253][T29022] binder: 29020:29022 transaction failed 29201/-22, size 0-0 line 3211
19:54:59 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:54:59 executing program 3:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getpeername$packet(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
lseek(r0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000440), 0x4)
write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
keyctl$set_reqkey_keyring(0xe, 0x6)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x4, @remote})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140))
write$eventfd(r1, &(0x7f0000000480)=0xffffffff, 0x8)
unlink(&(0x7f00000002c0)='./bus\x00')
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000540)=@req3={0x72f, 0x0, 0x3, 0x8, 0xff, 0x7, 0x6}, 0xffffffffffffffc6)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000340)=0x4)
sendfile(r1, r1, &(0x7f0000000240), 0x808100003d00)
ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x100, 0x208fe)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4})
bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

[  653.900272][T29022] binder: 29020:29022 ioctl c0306201 20007000 returned -14
19:54:59 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  654.069528][T29022] binder: 29020:29022 transaction failed 29189/-22, size 0-0 line 2995
[  654.099385][T29033] binder: 29028:29033 transaction failed 29201/-22, size 0-0 line 3211
[  654.100388][   T12] binder: undelivered TRANSACTION_ERROR: 29201
[  654.152459][T29033] binder: BINDER_SET_CONTEXT_MGR already set
[  654.165973][T29022] binder: 29020:29022 ioctl c0306201 20007000 returned -14
[  654.193857][T29033] binder: 29028:29033 ioctl 40046207 0 returned -16
[  654.193934][   T12] binder: undelivered TRANSACTION_ERROR: 29201
[  654.244492][T29038] binder: 29028:29038 transaction failed 29189/-22, size 0-0 line 2995
[  654.264230][   T12] binder: undelivered TRANSACTION_ERROR: 29189
19:55:00 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x400000000000000, 0x0, 0x0})

[  654.303954][   T17] binder: undelivered TRANSACTION_ERROR: 29189
19:55:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f0000000000)={0x98f908, 0x6, [], @p_u8=&(0x7f0000000040)}})
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x100, 0x1, {0x6, 0x2, 0x1, 0x4}})

19:55:00 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:00 executing program 3:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getpeername$packet(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
lseek(r0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000440), 0x4)
write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9)
keyctl$set_reqkey_keyring(0xe, 0x6)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x4, @remote})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140))
write$eventfd(r1, &(0x7f0000000480)=0xffffffff, 0x8)
unlink(&(0x7f00000002c0)='./bus\x00')
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000540)=@req3={0x72f, 0x0, 0x3, 0x8, 0xff, 0x7, 0x6}, 0xffffffffffffffc6)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000340)=0x4)
sendfile(r1, r1, &(0x7f0000000240), 0x808100003d00)
ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x100, 0x208fe)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4})
bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

[  654.455553][T29048] binder: 29046:29048 transaction failed 29189/-22, size 0-0 line 2995
[  654.492954][T29048] binder: 29046:29048 ioctl c0306201 20007000 returned -14
[  654.512931][   T17] binder: undelivered TRANSACTION_ERROR: 29189
[  654.533371][T29052] binder_transaction: 37 callbacks suppressed
[  654.533383][T29052] binder: 29051:29052 got transaction with unaligned buffers size, 12
19:55:00 executing program 1:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80000, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x3, {0x0, 0x9, 0x400, 0x9, 0x2, 0x80}})
fcntl$getownex(r0, 0x10, &(0x7f0000000700)={0x0, <r1=>0x0})
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, <r3=>0x0}, &(0x7f00000008c0)=0xc)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000900)='/dev/qat_adf_ctl\x00', 0x800, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000b80)={0x0, <r5=>0x0})
lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = fcntl$getown(r0, 0x9)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001140)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000001240)=0xe8)
fstat(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = gettid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001300)={0x0, <r12=>0x0}, &(0x7f0000001340)=0xc)
getresgid(&(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)=<r13=>0x0)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001c80)=<r14=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001cc0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001dc0)=0xe8)
fstat(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = getpid()
fstat(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, <r18=>0x0})
stat(&(0x7f0000001f00)='./file0\x00', &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001fc0)=<r20=>0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002000)={{{@in6=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000002100)=0xe8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002140)={0x0, 0x0, <r22=>0x0}, &(0x7f0000002180)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002200)={<r23=>0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f00000021c0)='self\x00'}, 0x30)
r24 = geteuid()
r25 = getegid()
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002240)=<r26=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002280)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r27=>0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002380)=0xe8)
r28 = getgid()
sendmmsg$unix(r0, &(0x7f0000003b00)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="2beabfe300316fe1db03", 0xa}, {&(0x7f0000000140)="c86c80879493e63946ab25f75e61021f359e23c7a41f298f60a45b3f3a441388365c9d8319ed6a7602db5452c3aa3c9fd4a97ece126c065b70af22ad21db78ee9d0be7ded76d594120d7b9fff23558bc984f0c2e667cdee2a396fc78fc77f8799dac442d7c027957de4dede4d653572f1feb4a40dfde039ee0a5da985dead7f45dd2dbc8335ade37ea6c27d08356", 0x8e}, {&(0x7f0000000200)="6706eb37551a1500b1eb391f514f4de79b5ca1cbdda1eba4d60388d0363e9bf5d7ebdd1e2f21f5097e34c570c14428790341e3a80ebcea501e5d1cff911e1528c3f145c2a52db35987e6d09749569b2e25030b2e483198b8", 0x58}, {&(0x7f0000000280)="ec3291a0bcb7185f83371f00cb5daeb78d896000271b598211e696e38df07109b49c7b3f", 0x24}, {&(0x7f00000002c0)="3ca7b3b33b549c96a61d2de15b4ecc8e482bfbd470b039f4cd6168436ce3", 0x1e}, {&(0x7f0000000300)="5e440d25fdc8f3e3398b978d8a95bb90f92761f8f6377117b33a6d1bdb45826574ed6772ec84cdac88096c68406bf3922cdbd15f7b7c05782eea5b72e37cecdca6b1e17568adde349d80226f402e96637b610deabf6b3669f798088a5cf07296d2e30c67d83ae1bd526b1a5b4103a87caacb9cf0229f5515524a049937038d6e7550fec63c6d6a86be925433120fe7253d44938b85af3315fedd602d325a970b9cf52b2a9932667659fb3b97cdc14d29e69951d0cd8fafa2014512e0d9d251dcdec519f564dd24b8df35b11fe0b21e29599c", 0xd2}, {&(0x7f0000000400)="e5d9b064f77844d57c98d9618ccb56d569fa07e067be9dac66a3b5db20e9f04b17d0a1e27e4a74848c2730f34b2e042d3f059948a0f7b81afdf1fd568cdc4e12848376c1f04def9a95c0a64fdd289268d712740d6ac836875ccd16f85a27ad1d127b2c0e8a29a206643297b1556b3103d6bb3fbd427391ce800005ca1028e350bc00a1deda1ff618befda8d082bc7e99e21958456f86a59643ce4a042b252d3e9239d3f3aa27b3aa4e31", 0xaa}, {&(0x7f00000004c0)="ae40861f18528c4bc3a1467b310970eea7dc14295240d915c1741e5c50c60441e2733060489000d5d1bdff0d23ca657a2d1696c102eacc342893fed3ad857e01af5182b9c9cff35092fa7b35741db97fb1becc6866f5ee1dd1a7f6cc8f3c587b92cfacdeab4a72a820f248166040e81e761c743286f998fe7de6609eab655a08d4437732e867ea3919", 0x89}, {&(0x7f0000000580)="97557824e3e6eab864f1cbda41b46f335c7534758ca7abc13b11ff21f1750bf417d28de5c1b583dae0c71089aad5dda59874caac957b49b4b8995aefe6776e95ac5d9386c51b6bf8a41da800af574d50525f4ad73525ac43a0392d7567aa8cd44ef6d0317bb2b50bf9cd92b28a62ea19a842376b9e11b20c3ec1dd6012671e9ee05debcae829bc8c", 0x88}], 0x9, &(0x7f0000000940)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x38, 0x1, 0x1, [r4, r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x58, 0x4}, {&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="cd81ec06177edff3aa27d2d5524cdf21fc351449104edba9dff5d3954aa7adc892ffacd9a2d227d4e9acfc19f24beb64761b921948c40f7143277df922668d5cb612faa4368d8572a0097866c6f1a3cd795e583b961f7de1c02fce26563b815b7394b49ce1921a559b17a4646a0496c59fa9c18af25a7191ecbe9fb9ca543f4ea8eb262648a92fba612a7a65023f4d7b9ed3f8c4e389c87f07375ae911beb72fa19d5e18bb242e394d4c060219cb503592b256fcec0078cc558ab1798c271f3822e7e336b4cc8a943ccae0f29dc0a05e904ee38fc584f9bf0fafafaef7717cbca920d49f2098894c72fe7c9a3ab8c7b749e0", 0xf2}], 0x1, &(0x7f0000000d00)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x4000}, {&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, 0xffffffffffffffff, 0x0, &(0x7f0000000dc0), 0x0, 0x1}, {&(0x7f0000000e00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000e80)="f6c83a3ff69528bf081ef5cc50e6b02b046061f924f0eef6cab431a4c9501539cfe548296aaedd51e4b697d474b0c9a6777abfacb587f5e7e6b57b69f713137b823fd4301dfef29bec3dc38ca875abbf635dc6ff5328fdb1b4831e78ced10ae541b9821cf071f6571f088395ae48be698f9091e130c7b7562cfa4e33da6270dcc7933c337e71ae78aec818787168e4a49674563908c6dd7a7e83fa", 0x9b}, {&(0x7f0000000f40)="f86cc4c1b2318b7f710f972ec2c99645d17dc651c23911991019bff414bfe5512dd74b29d211e4b8d89924a213c9281904895167432484b8639d07cd673c241f4d756e37c3bf4a5c2400d2cd083a053f9f420798fce0263e47046458f859687a5850a61a5da388fd3c6eac84638680ef322ab710c02408f49ecca875d63cba7d1c9e4f8ba4b2dddacfe0c34ba038bc483008e3f7b71e7bb78efe4e19cae0e4c38b72866d4d54f75c35bd7ae562540bca3be8642e3cee2369e9561207d0ddd56d841d028adac021b9b65967c77dc2ae5c577c854a32e9e3e115c4d07d61bf2bcdc59f2a", 0xe3}, {&(0x7f0000001040)="386b4812c9c1aeea146d7cc578de38a19d82087417578aa36bccd9769054130f035c052b236aa92065b213b2cdef3c1834caccecae6b2686ad1f0d5085feacab4bcf5140bb5c532d7a0a7f6724982fd52aaf090d2cd7f810b52992d1dedb18bcb1acd79cbfeeb09df0f0aae1b13817b65c0bfd829120b198ff89395e51b648abd797ba03ad852c977a0103a4c3a596f8dd40c5f3b78d83bffe72f95d861eed5a554e24b1e1818a6b96d1fb936689d45c211de074d7d1af", 0xb7}], 0x3, &(0x7f0000001440)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x100, 0x10}, {&(0x7f0000001540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000015c0)="dc7202267d3a0a902d90ebe646fa61cbae47d927b7d6454f69789acd2845351521838e27561fb90cb980e85c6fa3646aa235ce1b94b153e947ddd007ffb013f05a44e7b179f8c14412e9a8d84fcd95b67ab1b6dae995cb56acd803fb4bc4c9437213b8eb2b7e48bdae8be3466aca2a481fb8461eb241e00bb4400f771739f94315863bdf8b907e1fe56e1807ba6b453d13b225855dec67941550e2911e4171c477282218d2674b448e9de024e713211661d980f174ccaed2298f43cc781e19edee5326bf811344493798fc67faab673e647173ebcd152a99357039104c2d413a", 0xe0}, {&(0x7f00000016c0)="e630fb82b9b9a09c338ec7ae187521ed5a76822c0491d449ec1e9e9e3aee0e9feef26a56f12ca2940bb35c40ce1848bb15ef3ee9f4a49a0cb05e25320368304f4e3f0e61e8ba3652115e7d5944187d89ba4ac0c9da726c939b2a5ee07d9e6d02bbc900d8da9766ea218cfd5cbf3b2a96286dd64befbf1c680ffde7fd6be12abac306c08ddc0cd56bd4", 0x89}, {&(0x7f0000001780)="86f41feb55ab1a2fe6ae9f36c5f8a2e2e1a52ab5c9b0d3f2780b3e796ec8cd81a51bad403e8c11bd169ae672bdca5f023e1b5477183cea70279387493f173c2fcb19c54cd3f953f1b7da5f99738b71e87e377fbaf4c8457baf425d9fe4c9db0d61e0c97a5e444790380aeead4d4f94361c277a22dcf0dba98b489cd76bc1ec9c74be7fe87b5b39cfa37d3f3825b1f24baec986d16e680fef73185569704eec113bd2ae4299695bbc2c612116d2249dc8550d469beadd34698ff3cd820bb5ab3588a3f84f43011bf29401d1c18fe5b6d2c07c198c44698ca341cce205e7", 0xdd}, {&(0x7f0000001880)="0d07c98feeb0fb01aca903f08702a3de38323e5013627766787faa03af0a5eb3abb2bb52729a4b10f754a6a3941a0f3cfe0a834641746426e96696fca5695d0c841773464a7a03bc3955dc46791edcbddbe9035eba374e56d0ff42bec28a60167defd12e61ad08411c", 0x69}, {&(0x7f0000001900)="9504e080a2ded2b078514210a042bea5033db6ba07377e9d6d36a85130f052d5b61dc31e23e81ba806efc36775a722f567b995d24ace4cff80c85870bedb2b2df5ac32b1139ce097bae2a77d5d415d642038d309ac874a77453a17e118035c21e28f68d9008ef86dc4adada4f4c55d88107d8cdb2cc6803269ff08ce9f002cdecf39", 0x82}, {&(0x7f00000019c0)="472cdf7f3f83d4ac349e04505694ce48e1697302c69591341615ce2386a5b5571ca6b8825806ec2d4f3d0ea3e34371f681ed5340524b6b0b138c5b62d43d611bdb020a9280fb33ca2da6b702117354557c933d91023d3e9956fa31260349daabf2192e0f4b52dd54a0", 0x69}, {&(0x7f0000001a40)="777a9bf9057f2bcb91823d15ec6751bca987cbf7a7a99534223be44df26b6c5dbce16774c1ca285b928128be4078849ea61f976032ed474d4028215d6f6ac09d849e683ad1295a3517add9015b19dfbfc7bbd3ed9e46643c6a38800445256b4432dbfecbd8e9b3910dd45e58bddad1f0912151412b423f3f8bb6c72476a340ebbd9cc9bac90957b20c3de6aee272abd7a5b4a802a7e95d2345a993173bd7989fbcd56aa4e830a83bb90f2651eb6cc3b643a24298ceb3d8db12b509a98980861d1098e087065e4021dd15334e4e65103340ab99", 0xd3}, {&(0x7f0000001b40)="d83175bbda5fd89598100d0ac504142b450bad7390359bef369cb8e433", 0x1d}, {&(0x7f0000001b80)="d8a71ea57f0b7b5b", 0x8}], 0x9, &(0x7f00000023c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x160, 0x801}, {&(0x7f0000002540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003800)=[{&(0x7f00000025c0)="848e811fc4d3a0408c30872c153ae20a9f3cafd99521497f69de57c473882d0460e6f77a4ec46534ab45e74c34ba8b96e6d9ae030e491b52eb997c780f80bd8c9c2cb3fc60e0ab9811fac24d5c04359a0edaff52c18987632037d65e97c8028883142f5203b738885b59153b7fd268fb7514c1836a4195d686f2ecd4e06c5402c94e29f947eb082676508c273fa7c6e5f487fbdcb51a9b01842f3eac5b760617f09e093b552237e8defc18", 0xab}, {&(0x7f0000002680)="31a827f44f740ea7b197a11f40659dbdb3e3d45efbb9ad94adadfe20d038c1f03811f85e418e2a4281401e1dda8e7b0c218584c9b91844b0469620b24fa56279d6272f2ab531eb6a57af1b42681e7f495c93cb80cd5a96b1245621a770985b3dd92f6493b5d30b309656832f731ffac812bd1c5546596315a8679001bfdecad2c94fe2751945c9b4d4987557de66895193bc0ba1b30ddca4e22b60f65f818d3ac6c8390fbce99850164850f52d92bc64dcdcb8b35a0bcd1d6cc0058d8fb8d319d0e193d013b5a9937f39feb10de273d566f63d6d0f7f445a58f1f1", 0xdb}, {&(0x7f0000002780)="87da888482fb8162edddea8e946f30fd1f48b262a6aef28a32f13888fd38d3ec80d4aec868ee0081750a06166221766b54c1bfc22c957128b828831bb77e5803236b64c62880b47c55764f1cd3b09eadd64b523ee416d3e3a58d2190e76a46634d45bd976d62af718f8f", 0x6a}, {&(0x7f0000002800)="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", 0x1000}], 0x4, 0x0, 0x0, 0x8000}, {&(0x7f0000003840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ac0)=[{&(0x7f00000038c0)="a719b48dc487eb19a62e40c156775649ac7fa1a187231e2ef840a84f90b7cea831761e84cfecb088ae41c8c65442e3ed082428588a99a6183f5949b2aaa95a705c255b6a202537da27985ad9cc82f0f744c14cda01b6ef0fb93fe3ed3001d40091e48b999423c5f00103c8d3aaa126f69fcc2d5631727b26e117c580bb3790391750d274580357bda11a0e97078ce7a1c7ddd66f3ed5216472a391778223c05e96696a9c6850f83feaa9e287802a84349df17d75fb0b3230a276606c34bb147915e09a", 0xc3}, {&(0x7f00000039c0)="886f98538ee29932a0d5707c0a1e69c8f0c5c700f57ebb7464360f6c53e6499ef0ae95ed12fc333fa31410f5033d2a5a0f543f4a0a9dc92149c9492b5d267d38caad7ec879ff540e8bf2", 0x4a}, {&(0x7f0000003a40)="537e8f42fb0c57ef7b039b4eb7a4d753a585ee5ef44593262797f9e8bfd59facbb777353b8005e421f756365ae677650ef610ea4af4450b4cfbcf64d792318e50269045d711be06b", 0x48}], 0x3, 0x0, 0x0, 0x4008000}], 0x7, 0x4000)

[  654.581527][T29057] binder: 29046:29057 got transaction with unaligned buffers size, 12
[  654.604478][T29052] binder: 29051:29052 transaction failed 29201/-22, size 0-0 line 3211
[  654.653550][T29057] binder: 29046:29057 ioctl c0306201 20007000 returned -14
[  654.661172][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  654.679371][T29067] binder: BINDER_SET_CONTEXT_MGR already set
19:55:00 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x500000000000000, 0x0, 0x0})

19:55:00 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  654.741793][T29067] binder: 29051:29067 ioctl 40046207 0 returned -16
19:55:00 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = gettid()
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r0, 0x10)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="052fc7542225ef16a69bbd8edf69338243d80b45625661b76a4e1ba68fafff70ec52d59385581604878321552d5c9dfba56e91313a36a3d0d0b9573a02bc281fc736fc0ad158730b70"], 0x39)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r1, 0x0, 0x0)

19:55:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, 0x0, 0x100)
write$binfmt_elf32(r0, &(0x7f00000015c0)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16]], 0xfffffd6d)

19:55:00 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  654.855508][T29075] binder: 29074:29075 ioctl c0306201 20007000 returned -14
[  654.916113][T29084] binder: 29074:29084 ioctl c0306201 20007000 returned -14
19:55:00 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x600000000000000, 0x0, 0x0})

19:55:00 executing program 1:
creat(&(0x7f0000000340)='./file0\x00', 0x60)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x13, r0, 0x0)
mount(0x0, 0x0, &(0x7f0000000180)='nfs\x00', 0x0, &(0x7f000000a000))
getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x1, 0x0)
syz_emit_ethernet(0x230, &(0x7f0000007000)={@local, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @multicast1}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)

[  654.979191][T29086] binder: 29085:29086 got transaction with unaligned buffers size, 12
19:55:00 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x105000, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x32)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x16}}, 0x1c)
sendmmsg(r1, &(0x7f00000002c0), 0x222, 0x20007ff9)

19:55:00 executing program 3:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getpeername$packet(r0, &(0x7f0000000380), &(0x7f00000003c0)=0x14)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
lseek(r0, 0x0, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000440), 0x4)
write$UHID_INPUT(r1, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9)
keyctl$set_reqkey_keyring(0xe, 0x6)
ioctl$sock_bt_bnep_BNEPCONNDEL(0xffffffffffffffff, 0x400442c9, &(0x7f00000000c0)={0x4, @remote})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000140))
write$eventfd(r1, &(0x7f0000000480)=0xffffffff, 0x8)
unlink(&(0x7f00000002c0)='./bus\x00')
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000540)=@req3={0x72f, 0x0, 0x3, 0x8, 0xff, 0x7, 0x6}, 0xffffffffffffffc6)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280), &(0x7f0000000340)=0x4)
sendfile(r1, r1, &(0x7f0000000240), 0x808100003d00)
ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x100, 0x208fe)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffa, 0x4})
bind$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

[  655.035155][T29089] binder: 29085:29089 got transaction with unaligned buffers size, 12
[  655.056507][T29091] binder: 29090:29091 got transaction with unaligned buffers size, 12
[  655.097881][T29091] binder: 29090:29091 ioctl c0306201 20007000 returned -14
19:55:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  655.159358][T29101] binder: 29090:29101 got transaction with unaligned buffers size, 12
[  655.213026][T29101] binder: 29090:29101 ioctl c0306201 20007000 returned -14
19:55:01 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2}, 0x8)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0xee, 0x3, 0x39, 0x3, 0x9, 0x5, 0x0, 0x8, 0x9, 0x1, 0x200, 0xfffffffffffffffd, 0x6}, {0x8, 0x4, 0x8000, 0x2, 0x7fffffff, 0x7f, 0x8, 0x101, 0x0, 0x6, 0xfffffffffffffffb, 0x7, 0x3}, {0x7fffffff, 0x24, 0x80, 0x8, 0xe6, 0x7, 0x9, 0x5b1, 0x85, 0x4c6, 0x6, 0x8, 0x3}], 0x5})

19:55:01 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  655.325056][T29109] binder: 29108:29109 got transaction with unaligned buffers size, 12
19:55:01 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x700000000000000, 0x0, 0x0})

[  655.420738][T29117] binder: 29108:29117 got transaction with unaligned buffers size, 12
[  655.481642][T29119] binder: 29118:29119 got transaction with unaligned buffers size, 12
[  655.519467][T29119] binder: 29118:29119 ioctl c0306201 20007000 returned -14
19:55:01 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:01 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="5ab74c5773b6337c3610fc1554ed1d124d5f77c181524de050cdbf2d5e24e5f45185cccf19e979f7010000"], 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=<r2=>0x0)
r3 = syz_open_procfs(r2, &(0x7f0000000340)='cgroup\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000080)={'dummy0\x00'})
clock_gettime(0x0, &(0x7f0000000100))
clock_gettime(0x0, &(0x7f0000000140))
r4 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0)
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000400)=""/68, &(0x7f0000000540)=0x44)
setxattr$trusted_overlay_opaque(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x147, 0x0)
ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000200))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpgid(0x0)
epoll_create(0x9)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$unix(0x1, 0x3, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x4000)
ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, &(0x7f0000000780)={0x0, 0x16, &(0x7f00000006c0)="87fc2711c6129998f2c41a7223669066ff851bd5b4b93504a1b2951926ad1fee8447d61a9cbb9cc4bfe6f0c2c303063b4a45d12892547af4f21666d46f32c5920e0f9072515979e70fcf557c9607aa4438507bf545bd2b56a56587a1bbe35ddab7b0fb51fcd68c91578a6640be8996155b2976cf8786f0978619728cd46a426908e75db008b278ad15c735b6c5818ec1f5cac5afa030e787f6c8db35", {0xfffffffffffffff7, 0x4, 0x757b7f5f, 0x0, 0x2, 0x2, 0xd, 0x3}})
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r6, &(0x7f0000000300)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r6, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10)
write$binfmt_elf64(r6, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)

19:55:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  655.551149][T29122] binder: 29118:29122 got transaction with unaligned buffers size, 12
[  655.582552][T29122] binder: 29118:29122 ioctl c0306201 20007000 returned -14
19:55:01 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0xa00000000000000, 0x0, 0x0})

19:55:01 executing program 2:
prctl$PR_CAPBSET_READ(0x17, 0x21)
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xc0000, 0x80040)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3)

19:55:01 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x20000, 0x0)
setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f00000000c0)="ca306599decc46", 0x7)
r1 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@rand_addr="5f5bf649cc91e3b58892ce082a1e7ae1", @in=@rand_addr=0x3, 0x4e20, 0x3, 0x4e23, 0x0, 0x2, 0x80, 0x80, 0x3f, 0x0, r1}, {0x1000, 0x0, 0x6, 0x80000000, 0x8, 0x6, 0x7fff, 0x9}, {0x80000001, 0x10000, 0x32fc791a, 0x8001}, 0x3, 0x6e6bb2, 0x1, 0x0, 0x1, 0x2}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in=@local, 0x3505, 0x0, 0x1, 0x6, 0x8f, 0xffffffff, 0x100000001}}, 0xe8)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000340)={0x0, 0x401, 0x1})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
connect$rose(r0, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x40)
umount2(&(0x7f0000000000)='./file0\x00', 0x5)
write$P9_RLINK(r0, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7)
syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x9, 0x242001)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, r3, 0x721, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x85}]}]}, 0x20}}, 0x0)

[  655.792080][T29137] binder: 29129:29137 ioctl c0306201 20007000 returned -14
[  655.818294][T29135] binder: BINDER_SET_CONTEXT_MGR already set
19:55:01 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x113, &(0x7f0000001a40)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x203, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffff}, {@in=@dev}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0)

19:55:01 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  655.856745][T29135] binder: 29127:29135 ioctl 40046207 0 returned -16
[  655.878493][T29142] binder: 29129:29142 ioctl c0306201 20007000 returned -14
19:55:01 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x75, &(0x7f0000444ff8), 0x8)
r1 = socket$netlink(0x10, 0x3, 0x800000000000000)
socketpair(0x4, 0x0, 0xb6, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f00000000c0))
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000108000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800100006000000"], 0x30}}, 0x0)

19:55:01 executing program 2:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000200)={0x30, 0x0, 0x7, 0xa, 0x6, 0x81})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x20000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffff9c, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={<r2=>0x0}, &(0x7f0000000080)=0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000380)={{0x9, 0x5, 0x101, 0xffff, 'syz0\x00', 0x188}, 0x4, 0x40, 0x2, r2, 0x5, 0xc35a, 'syz0\x00', &(0x7f00000000c0)=['./cgroup.cpu/syz0\x00', 'syz1\x00', 'syz1\x00', 'syz1\x00', 'em1\x00'], 0x25, [], [0x2, 0x4, 0x7, 0x6]})
r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
close(r3)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f00000004c0)={0x7c4, 0x80, 0x3, 0x4, 0x8, [{0x2, 0xc7e, 0x3f, 0x0, 0x0, 0x200}, {0x7, 0x8, 0xffffffffffffffe0, 0x0, 0x0, 0x4}, {0x64573c05, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x401}, {0x100, 0x9, 0x0, 0x0, 0x0, 0x2102}, {0x80, 0x101, 0x100000000, 0x0, 0x0, 0x200}, {0x0, 0x10000, 0x4}, {0x794d6139, 0x7, 0x7c89, 0x0, 0x0, 0x80}, {0xa8e, 0x1ff, 0x5, 0x0, 0x0, 0x80}]})
getgid()
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6)

19:55:01 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x1000000000000000, 0x0, 0x0})

[  656.096537][T29153] binder: BINDER_SET_CONTEXT_MGR already set
19:55:02 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:02 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7f, 0x200)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={<r1=>0x0, 0x1000, "c65876d18b9f1f64807e65b7e2884687abfba9c7d29c07021aa59aa741ef8abd4f0f6e7e9b7fa72b7933933424531d65936fbbf76b1f830338099a25571388465900d48d7dee6b57dc7f71327e7cfd726a57bc10c1804775c7acf24a769d90b0f71bde47156793ebb30811a13ed67e74b8eace566e114c3d6022f67ad079631568c415e5ac3ce78e8e37d6fff159c8cdaf7483fb5080c3149943cfd4ec2595b095f636ec4b27070fd535b44263700972a6c3c566412d8bce256085df0e3195c7b3362f86492345c85a99ffd23c26b91abee190e6e7ffeac0db557f8b8984cf9f667c79b9ba94826fe7855ab8c15bef4974242ad7f0f10a58c826d1c2ed1422be3f49f49de5e55ce66500fe2831aa7bf9a323b1f325622abb9a65b9d32514bd9f1aa22d887d26157b6846899bdc7f09fc6837acedd6202ee84e9ec1f6b4625a75ab0cfeef93a9f37ded9af6e41a91397e8e51d800f6aef2b2ac974ca58ae8e25c752faa811834a17245ef0d34b1745a196651d6aaeed713731d23177e2d94ed68ce6d8c2450bbd08c3f5d43d2c5535cced41de7131f9922d5f9bd0e596e83125558f406038f0bb0dfbb609854309f13d3e35328245f4268259878641cb23f902613c06d390ba23c9c3f7dad13b1432b57b83e8c07b9722e8e755fcbbad025742b58fc5c09e0cb3394b1e2fa4b3c8f251bc8975a342477cd573e1fc5bcf293a0989aed642567c7b07098f07f0b642b81e06466372199e2ae1230afab57da224ae3a8df4cc4640b115b0159a0134635a294ba989f3f4d66f1d2ebc9c206c909c5dc4db5440961d76a5c3716cb120a339047eb6a6585fcab832d72a48c201e3818ffd70522639f16137230114e2f2ed0708d571ff67c1e1f36bc17df964e243b31a928d4d0712a95038da6b0573cd24bf980d78a65f743d3bf0895da829be54d99b6cea8aa64028af1fe546bef8cd66cf57dad1504c784d780788caeaa0ff1c0500aeec19b3d8cf32e1b2eaa1aa2f331b34911e217dc4a58e09cbe36f77d8c1559931bce233843a001bcc64c5ebd1398f323a0dcf8ad8aa3dfccd780b6e771d140bb12fe83a55b2b86a38cf261292dfb05475b6053a553f295d5d11dcf8d3df9f3341793ec8144deab08ab2f82e87e933c09c438c633c44fcbedb081e5299715d40911345159d4d0d6d85845818362b9523900788d35fb6c2f328309d9b8272cf1d090df084b6a5891e92d70cdbecb9a31bc2288f848c6c9d2add8eae57443eb708a3085a774a3339a9f02a17b73ce2d389ae1d5c1a692587d512b67a70c9e2cc1a58dd679f8a13750aca28cbe9d2c1ecc2707a6a9a112f53c9d96a1107974b8c96bac58961dfb2549c5679ae25c834cd9b65cc56c89159f664b3e46284737e09981b69d0667971be420fa0208bdd0e9e32eb002e242d26676fa79d4a5cd4025ee4b17a6df87b83a839b2c70d4e78684a5240f3a23e3e7c4511f1cf00f1468be221908c9995e488f8fd5537e3181d16850ac73a39aa5f3736d206877e9520df2bf94052142a6fef7e47ccfabcc21b9bd319da06b6876d1a22715f71d0273170251ec26649df4fdabddc82303153de4a90c5536c701a12d186bc299d8c8a7e0157dd99b6f4d5d53d725d40678fd2ba9e6802a22cfc5f5da94068668c5a7447c9309854f26de237dfcb5b568f77ab13f2f73ac10f35c75a42464c3512eacddd5451ea32d2a0a48b725676daee4d03f4ae446208aa3d4b53c32e261a5fee80697b5f6028a2c37961f182c0dfc9682fa933061710c1b954a3b57237afa7d9dee0a6a9fb2d65b67e4cdc365cb6568617c3a36a29c611c6d635f39b3104ad780c5a8d68f94e6aa78afd615e07fc9369302461b0733fc1fa5e3b6292c4e0b4bfcbe962afc6c7a97dcde46f42f336cc735fdeb01155f71fdcecc4adec3bcfd86923df3fa78439b2410c4a25845b3075946306f1d4aad4d7a0af1e79381aee6f2905236d7dd23e923484680d82117f11bc0463b1c1e421262a211ac1ec4d655eca295417ef0915f742999c5b16d5ecbe94909fececd0afddc5cd98fad2f38bf41afa2dd31ff038c183ec6ce360d92341eec77770601412c2672d01289d340579359132aba6e76a6321778e8d7d1e5022171b734cf4fd7d74cd2c9ef9d695875a3a3202654d6ef48851336818c03c606b91aca0dd792a6597ffc7ad90960fb6c76e2d63403a14ff4f7396989a9ff1aaa2d330411828ceb5952348d4f3d611fc5f27ecae3e09dbed003873dff9b4926511408cda77958ad6e5cd9af44bdefa80812947622da4c2d0550858707ce7af02cd16e19c2991e877ebf08f889f37762a4176eafee91375276e6d853817768d42c177462bb878351c783c93bb9edf98a8eda6ece38fab124635409a109909b9482210e5c52731c91fcc8eafa3cedc6657cce5d600c50bbf36f9bd159856d76523bd47e944bea8736cb8dba6bdf3af8a76bfcc5cd8df4e09db07983c5a8375ddab855bf03faabe591456c27f20cee5e39aaaa65ee4a3d559ffeb67050c5a453d14fef55e3509a00e6e2a4fbb85be64f54f5b396f00f2c7bbfd163c8b4a041770fe03cb52cba7a242bf2c9ad769b6c0aa5199334cbb90784171790e954a57b4a5eb548ec11fb4452a9d9664dc394221644a3ef031337462c2f08d541a772a9885510698ecfacc576ad4a73b4e4c1badfc4c8ad9716f0512d0432f66edf0e69734198371ab5cbf6c433721bca8f7dadc5741f28d50a8db7f3fee8a4621030e8216651c3d759cf4e5a232132215380cc4c981b155f0256cbb7b7b50d8c8c5282a0cebfc2fecc7e56fd086d7a8cb8ed071b5d45cc27b56c290e705a13d33a440151e9c22c4201eaac36f2ff538b30e46d0eb3c65bea0182ea3c44066e05eda4794d2923f3b464bc1748537b5b9000fef4dd1212ff913314509d8cff206bc9ee69798373e22b0ef7116da7e64333da3d7381cea33a50e0e629f0cb5e0941954e6d510dc68a4a689b09df5c64ea5ad8f10fd4bf0259691365d2339a2fed9ccf4f98e91cfebeb911eac9ed85af054f1bb1d3a5f5cbf340c2d24d146aa584dc3e8dc1d589f1fbb1a9987d3c87576783bd1c708839341602fd9568b49536f958c92bc6d4168827f67d84e665625bc253a6cd1f912a78e639fa331c7c6074a6ba2922fabd7969892e219b74533577be051680cae444e52d72ec5db5a974ef46cd0d3055db4874b92ee33df07ad5f4234f8d283e8bdfc430fa7bfc9cd09a4708f595c07f0190d4d5b73d749e7b390cf06942da6adec9f88054c1b4780bb7ef4db5156d754718e79194dc1d9b876919b98c4a04e610e47f38afb902d7ae1e216909db129b4d3a23633d4a8bccbb363785fc4d84aca6fcb72c7995a6f1a8de12d43b207c45e024af573db9ad65b8163e2aa6f7b69fecded094aec93d6589bfe878b9ef5c28e28532811ffb3df679073352fb78aa9866ef1d25c76ab11d95541840bb293966ce3e812127fe42e8128efb84bdedec410b77058c3a2dc4b0166d389c69c5505674a19407b5e6c0a9cac7d3288b7be401bf852601a01f73c878852be59d147ff30c7c7c00e33de322e81b8fb9d54abbf5c9fb714ac3bc9b30ee627a563380754aa4dca39c8acaca56bff1cc695c75620d171da534d70d082b563147997dbbc47b399e8cf64cd218b28179317c06a21c89d28ce50f4600052c0ce17cedf4d04c55d0d310c23a996539caad71ad99ed48204e14960e64bf35c810c1a53c73a0c7d1d6caf06c9035acee452439a2d43a145a57f324408a51094bf1b736a9f494602f235fc0fba2a6daaa0d6f021c52f763def686bf826206242dc2d71074e849e5fca52d7a678e63739079f93f7219ad380e26d198ea348cd07682427c98530c85d55d0936bf9d25f6b135c57388b71a99f54b4095d4c98833d414704cb067183dba8bb181d7aa389caf4fcfecafa3b984082d40927ffd79a697b71f15e88300118f0c522367c747a200934924cdfd019f06741cc2dd97bee646b6339887927e701f8781a7d45672825c60cdef4daffd85a8c01fcbfee3aa88c12670bfff8a36f7f8d2474514f284f080010004cc7b1d0ed73594030b3d363536d311b666425a6c4ab123e94e4bd95eb0021db20e7e4e0aa69ace4a452d45aeb8a53471eeb841af5b723e84b81da8ed90b40b71c2f4f87b7014a2986fb4a57e89c82ed80bf76593b0191ae9fdcdeed3e064f95d0cc26df68cf85d59f3fc34551b6f8cce7b9296f21932d528d5a4e2f2898cc16c228f09ac72b32e9de589da8b7f701e3e2c7814427c7a7dc2b5cf067faddc47c3472812b0a3a9a8d748425b5531046710a8d8dd205246ae61ba7e3f61b826b3a3d2d56f411c0712de5d948bf8b86ecbe68d934d5714a8092478c35767b10e895c2303777f30a4ad8347f3c93afbe18cb38c612ff191253d1faf3bc6cc70ddb62a9549452bc1f3439208d08eb4dfe27b57384cf068b3b4d9308ed5078cf428a07a12dba46884675758c05c5404b4e149b72fc943ca444426c5971745f72f31d7b07791d5cb82e8584ecbb923d4fa7131f96593414e4b442465d2081adf483639db72f94086e2c4af284ebc02b7e4a10936d0ac8a3ecd56e9caea29a9229a40a92ea2b5a7f04a0c5616b327ad2ee441c26b61b6f039cfd27429408b638498ee733a9023dbf338023a0025bbf4344184ecbcab910e0e56d1230f65acb5eccf2b44da295611eb4623de9995474fb5e3fba24bf7df5b459f253dd17b838b3d2e7ee1539da72c42a2553ddded00f72c7b215a3ac33c40310ae125852d8090798acbce3b5646e5371ed2b7bc1c28e15e8490f39ead965bd4381316ab5950728e47290649543aecf7dcd077b6c84cbc4e4328c0270d914cc3ef060f2cae32deb06582d196672d4feb8a631024a8419f071da0f1d63aad88ce9dc92d6d404faaa3d6fa76fe7483a21883e04830a2083e50b25aeda01dcd668b3705adfd73271bb3b9015317b51fb730d99ca12ef730d761c8ceb198e7e465036389910f335c143ee2efb3855f5932614d726ae4dee609ec4dc6c77f32f6b78c0c53ec37cd138fd4993ae2f97f19879a07b42b170c9901d15c5bf9bf6cbf492a1d1c4cb43d7839d842a467c4db018ccdf9cec3225a550e0bae4cbc0dcbb2eaa8bd2017f3acf47fa508c3e4a162d6ede4dbb2b86ec889d5c17ef2db77143466377ecd33723a5c899a843833c6741dd877dc4af1743fe5482bfd130f94dca19201a0e5f4ef7a1fb46d5dcd84e42b84117c679d8a561f786dd992f2355df7961ee110c782bf606f0e10e4d4ca872080d949c2e05b353dcf0489865251af4b65eb55cd5c10d605aa95337853d5007cc135eaf38f5e6e59c82cd09503b983e1f8e9fc75ff6139453d2707939f7f2829bdafe7ebbbd75cc857300eb014e91818a0a77da572d73dedf8c5522387a13a78737c9951bc7b3bf4d0cb7376a270b3a6095755f1f07e1540b5bb9b11058a9b7514b093367432ffdbeba61d1a0410c87bcb3a5b9f6df804aebedaa6fa21874d31a7a523abf7203caea029c02af580903370e443b5ffc21d1a7e76a5ecc2cc05cd251fad5b5d66c9b989126d9526832aa5d062789d191c6df8cb2377a9de66ad3c09e43556dec3e2f0724b308fb70747206bb61b5d8d23b7d6aff2f7a5602e8ca3dcce3cb3c8839fe842cd92a0d772781d7b54115dd98bb586b05e4cb28c9ba6ea385dc8254413d923c2f9d85b387be391c88525f102bb0da038789152669920b030e4735f85240a7be54445a88476"}, &(0x7f0000001140)=0x1008)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001180)={r1, @in={{0x2, 0x4e24, @broadcast}}, 0x1, 0x7}, 0x90)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r3, 0x0)
close(r2)

[  656.159488][T29153] binder: 29152:29153 ioctl 40046207 0 returned -16
[  656.159889][T29162] binder: 29161:29162 ioctl c0306201 20007000 returned -14
19:55:02 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  656.238365][T29168] binder: 29161:29168 ioctl c0306201 20007000 returned -14
19:55:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:02 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4800000000000000, 0x0, 0x0})

19:55:02 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
r2 = msgget(0x2, 0x2c)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000040)=""/37)
link(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)='./file1/file0\x00')
clone(0x82200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)='./file1\x00')
rmdir(&(0x7f0000000100)='./file1/file0\x00')

19:55:02 executing program 2:
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x80, 0x20c000)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000140)={0xd09d, 0x3})
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x7fffffff)
r2 = open(&(0x7f0000000180)='./bus\x00', 0x1fe, 0x80)
write$binfmt_aout(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1af)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0x52, 0x1ff, 0x2, {0x0, @pix_mp={0xfffffffffffffff8, 0x47c, 0x0, 0x6, 0x0, [{}, {0x0, 0x4000000000000}, {0x1ff, 0x6}, {0x10000, 0x8}, {0x0, 0x200}, {0x1, 0xff}, {0x0, 0x9}, {0x5, 0x8}], 0xffff, 0x3ff, 0x2, 0x3}}})
ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0)
write$binfmt_aout(r1, &(0x7f0000000880)={{0x107, 0x59c, 0xdb9, 0x2, 0x293, 0x7f, 0x186, 0xfffffffffffffc00}, "3fae6e86fe4fc4f0e4d9cbe2368d5590a03f0187563314ef6ecebf1ed20fb2fd573356b20eed16fbe9118ccf19f8bbc7c62f20dd1fc24532f4c8c9553fae1fa88dad1d24cb2cf63e4a157cae49af431f676a4e8c8b2468e19ef7ff91f56b03dc978718c8a4c40a04023668434a77d292970eec00a049cc72942157af527e3819c3dfb3e17b10da7d1349ebc76fff10c7ba295a9eb8a91313e0eab84ae53253eed5b13c", [[], [], [], [], [], [], [], [], []]}, 0x9c3)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe)
ioctl$UI_DEV_DESTROY(r1, 0x5502)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8e893128d66efbafc0cb811caef0fbc18dbcedf30660f16b40d000f015af866b9130300000f322e0f0098b385652e0f01d1ba2000b003ee", 0x3c}], 0x1, 0x49, &(0x7f0000000240)=[@cr0={0x0, 0x20}, @flags={0x3, 0x12000}], 0x2)

19:55:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  656.473149][T29180] binder: 29179:29180 ioctl c0306201 20007000 returned -14
[  656.504973][T29183] binder: 29179:29183 ioctl c0306201 20007000 returned -14
19:55:02 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x4c00000000000000, 0x0, 0x0})

[  656.732014][T29199] binder: 29198:29199 ioctl c0306201 20007000 returned -14
19:55:02 executing program 3:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x80000, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000002c0)={0x0, 0x0, 0x2080})
r2 = syz_open_dev$amidi(&(0x7f0000002380)='/dev/amidi#\x00', 0x3, 0x108ffc)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x2000, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r3})
r4 = socket$l2tp(0x18, 0x1, 0x1)
connect$vsock_dgram(r2, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)
splice(r4, &(0x7f0000000140), r4, &(0x7f0000000180), 0x0, 0x7)
r5 = dup2(r0, r4)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f00000001c0)={'security\x00', 0x2, [{}, {}]}, 0x48)

19:55:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  656.851261][T29202] binder: 29198:29202 ioctl c0306201 20007000 returned -14
[  656.930446][T29174] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  656.960977][T29174] CPU: 0 PID: 29174 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  656.968924][T29174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
19:55:02 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6800000000000000, 0x0, 0x0})

[  656.979082][T29174] Call Trace:
[  656.982395][T29174]  dump_stack+0x172/0x1f0
[  656.986746][T29174]  dump_header+0x10f/0xb6c
[  656.991209][T29174]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  656.997121][T29174]  ? ___ratelimit+0x60/0x595
[  657.001831][T29174]  ? do_raw_spin_unlock+0x57/0x270
[  657.007005][T29174]  oom_kill_process.cold+0x10/0x15
[  657.012145][T29174]  out_of_memory+0x79a/0x1280
[  657.016850][T29174]  ? lock_downgrade+0x880/0x880
[  657.021718][T29174]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  657.028152][T29174]  ? oom_killer_disable+0x280/0x280
[  657.033363][T29174]  ? find_held_lock+0x35/0x130
[  657.038147][T29174]  mem_cgroup_out_of_memory+0x1ca/0x230
[  657.043727][T29174]  ? memcg_event_wake+0x230/0x230
[  657.048798][T29174]  ? do_raw_spin_unlock+0x57/0x270
[  657.053946][T29174]  ? _raw_spin_unlock+0x2d/0x50
[  657.058826][T29174]  try_charge+0x102c/0x15c0
[  657.063355][T29174]  ? find_held_lock+0x35/0x130
[  657.068147][T29174]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  657.073741][T29174]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
19:55:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  657.079323][T29174]  ? find_held_lock+0x35/0x130
[  657.084117][T29174]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  657.089703][T29174]  __memcg_kmem_charge_memcg+0x7c/0x130
[  657.095400][T29174]  ? memcg_kmem_put_cache+0xb0/0xb0
[  657.100628][T29174]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  657.106280][T29174]  __memcg_kmem_charge+0x136/0x300
[  657.111422][T29174]  __alloc_pages_nodemask+0x437/0x7e0
[  657.116829][T29174]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  657.122578][T29174]  ? retint_kernel+0x2d/0x2d
[  657.127273][T29174]  ? alloc_pages_current+0x1c7/0x210
[  657.129407][T29212] binder: 29211:29212 ioctl c0306201 20007000 returned -14
[  657.132566][T29174]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  657.146171][T29174]  alloc_pages_current+0x107/0x210
[  657.151374][T29174]  pte_alloc_one+0x1b/0x1a0
[  657.155903][T29174]  __pte_alloc+0x20/0x310
[  657.160252][T29174]  copy_page_range+0x1529/0x1f90
[  657.165230][T29174]  ? pmd_alloc+0x180/0x180
[  657.169708][T29174]  ? __rb_insert_augmented+0x231/0xdf0
[  657.175188][T29174]  ? validate_mm_rb+0xa3/0xc0
[  657.179900][T29174]  ? __vma_link_rb+0x279/0x370
[  657.184699][T29174]  copy_process.part.0+0x568b/0x7980
[  657.190129][T29174]  ? __cleanup_sighand+0x60/0x60
[  657.195107][T29174]  ? _do_fork+0x1e8/0xfd0
[  657.199472][T29174]  _do_fork+0x257/0xfd0
[  657.203690][T29174]  ? fork_idle+0x1d0/0x1d0
[  657.204119][T29215] binder: 29211:29215 ioctl c0306201 20007000 returned -14
[  657.208138][T29174]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  657.208153][T29174]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  657.208169][T29174]  ? do_syscall_64+0x26/0x610
[  657.208184][T29174]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  657.208197][T29174]  ? do_syscall_64+0x26/0x610
[  657.208225][T29174]  __x64_sys_clone+0xbf/0x150
[  657.246536][T29174]  do_syscall_64+0x103/0x610
[  657.251361][T29174]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  657.257275][T29174] RIP: 0033:0x458c29
[  657.261187][T29174] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
19:55:03 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x6c00000000000000, 0x0, 0x0})

[  657.280905][T29174] RSP: 002b:00007fe5bd5afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  657.289340][T29174] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29
[  657.297412][T29174] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[  657.305602][T29174] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  657.313592][T29174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd5b06d4
[  657.321582][T29174] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  657.455912][T29225] binder: 29224:29225 ioctl c0306201 20007000 returned -14
[  657.489367][T29227] binder: 29224:29227 ioctl c0306201 20007000 returned -14
[  657.507092][T29174] memory: usage 307192kB, limit 307200kB, failcnt 159
[  657.516600][T29174] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  657.529189][T29174] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  657.537070][T29174] Memory cgroup stats for /syz0: cache:0KB rss:268560KB rss_huge:258048KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:268716KB inactive_file:0KB active_file:0KB unevictable:4KB
[  657.561712][T29174] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26241,uid=0
[  657.582421][T29174] Memory cgroup out of memory: Killed process 26241 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
19:55:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:03 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:03 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
lookup_dcookie(0x0, 0x0, 0x0)
prctl$PR_SET_FPEXC(0xc, 0x2)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x3, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, 0x0)
r1 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000600)={0x2, 0x4e23, @multicast2}, 0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={<r2=>0x0, 0xc0, 0x0, 0x0, 0x400}, &(0x7f0000000100)=0x18)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r2, 0x2}, 0x8)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0)='tls\x00', 0x1b5)
setsockopt$inet_mreqsrc(r1, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28)
sendto$inet(r1, &(0x7f0000000300)='\a', 0x1, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x33, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x1, 'lblcr\x00', 0x20, 0x0, 0x44}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x4e22, 0x1, 0xae05, 0x9, 0x1f}}, 0x44)

19:55:03 executing program 2:
syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x1, 0x2)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x4800000c0045009, &(0x7f0000000080)=0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f0000000640))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x2000000}, 0x0, &(0x7f0000000140)={0x1b9, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0)

19:55:03 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7400000000000000, 0x0, 0x0})

19:55:03 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000240)={0x18, 0x0, {0x100003, @local, 'ip6_vti0\x00'}}, 0x1e)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8)
r4 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$get_persistent(0x16, r3, r4)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1000000000000003, @remote, 'veth0_to_hsr\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local, 'ip6_vti0\x00\x00\x00\x00\x00\xfd\xfd\xff'}})

19:55:03 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x8000001a, 0x0, 0x0, 0x1010000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x2, 0x2000, &(0x7f0000001000/0x2000)=nil})

19:55:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:03 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_mount_image$xfs(&(0x7f00000001c0)='xfs.', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
getdents64(r0, &(0x7f0000000040)=""/155, 0x9b)

[  657.753241][T29237] binder: 29235:29237 ioctl c0306201 20007000 returned -14
[  657.779095][T29245] binder: 29235:29245 ioctl c0306201 20007000 returned -14
19:55:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpgid(0x0)
migrate_pages(r0, 0x800ffff, &(0x7f00000000c0)=0x80, &(0x7f0000000080)=0x5)

19:55:03 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x7a00000000000000, 0x0, 0x0})

19:55:03 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:03 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  658.020884][T29264] binder: 29263:29264 ioctl c0306201 20007000 returned -14
19:55:03 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001080)={0x5, 0x1, 0x0, "f6fef46f3b46f482a0acadf42cddefbcfdf0ca6229deb28e44301a2a8b096496"})
ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000080)={0x0, 0x5ce50aa6, 0xdd, [], &(0x7f0000000000)=0x1f})

19:55:03 executing program 3:
setxattr$security_smack_entry(&(0x7f0000000000)='.\x00', &(0x7f0000000300)='security.SMACK64IPOUT\x00', &(0x7f0000000340)='-dev/vga_arbiter\x00', 0x11, 0x0)

[  658.085329][T29272] binder: 29263:29272 ioctl c0306201 20007000 returned -14
19:55:04 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x8000000000000000, 0x0, 0x0})

[  658.174331][T29274] binder: BINDER_SET_CONTEXT_MGR already set
[  658.190051][T29274] binder: 29273:29274 ioctl 40046207 0 returned -16
19:55:04 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0xa6, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000009060d01ff0488fffdffff57ffccad000c000100060d00007d5500010c00020000002201f6f00061"], 0x23}}, 0x0)
r1 = dup3(r0, r0, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x1, 0x8}, 0x1, 0x0, 0x1, {0x8, 0x7e2}, 0x7, 0xa01})

19:55:04 executing program 3:
r0 = socket$pppoe(0x18, 0x1, 0x0)
syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x80000000, 0x0)
r1 = socket$kcm(0x10, 0x0, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})
ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\xf2\xff\xff', @ifru_names='bond_slave_1\x00\x00\xff\xff'})
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, 0x0)
io_uring_enter(r1, 0x3, 0x100000000, 0x3, &(0x7f0000000040)={0x7fffffff}, 0x8)
connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x3, @link_local, 'bond0\x00'}}, 0x1e)

19:55:04 executing program 2:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x50)
ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000040)=0x8)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x408301, 0x0)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
ioctl$KDSETLED(r1, 0x4b32, 0x6)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0x8, 0x4, {0x57, 0x0, 0x1, {0xff, 0x8}, {0x81, 0x299}, @const={0x5517, {0xffffffff, 0x1, 0x7, 0x100000000}}}, {0x56, 0x2, 0x4, {0xfc, 0x2}, {0x0, 0x2}, @rumble={0xfffffffffffffff8, 0x8}}})
fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@sha1={0x1, "777f4ab93a6070c672366b41847efc64fbebb780"}, 0x15, 0x2)
lstat(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000380)=0xe8)
setreuid(r2, r3)
ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f00000003c0)=0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000400), 0x4)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000440)={0x2, 0xcc, "61c064b86d985731bfe25c2b55170078e1af79d3c5393e3808266a4791c60b09a0b704f5308d354383f80d37f8e813a85d19a524c233985febd16468bc25b27292d5b450e1bda44ad1f3eadfd518c89b122685e46509ccaf6aedd7b2f9ceb2eaaba035b0986d236d312b4df3f87d921bc08de347be4997d3fb2d53f229ba9dc6887670800147e2b283d94f1c1a2882a40153aab091da553467660a60282d68868f13c91194735eef687ead7662d36df80bedc45f8d6414ec6491ab36a6ece4b30a54c851c7c67ca311b4d510"})
r4 = gettid()
ptrace$peekuser(0x3, r4, 0x7)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioprio_get$uid(0x3, r2)
userfaultfd(0x800)
getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000540), &(0x7f0000000580))
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f00000005c0))
getsockopt$inet6_dccp_int(r0, 0x21, 0x10, &(0x7f0000000600), &(0x7f0000000640)=0x4)
r6 = pkey_alloc(0x0, 0x2)
pkey_free(r6)
setsockopt$inet_group_source_req(r0, 0x0, 0x0, &(0x7f0000000680)={0x8, {{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e21, @empty}}}, 0x108)
ioctl$sock_inet6_tcp_SIOCATMARK(r5, 0x8905, &(0x7f00000007c0))
bind$llc(r1, &(0x7f0000000800)={0x1a, 0x30e, 0x4, 0x8, 0x3, 0xc31, @random="3e600e97991f"}, 0x10)
write$apparmor_exec(r0, &(0x7f0000000840)={'stack ', 'security.ima\x00'}, 0x13)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)

19:55:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  658.313664][T29288] binder: 29284:29288 ioctl c0306201 20007000 returned -14
[  658.398402][T29297] binder: 29284:29297 ioctl c0306201 20007000 returned -14
19:55:04 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x9, [@generic="c9"]}]}, 0x1c}}, 0x0)
r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000100)={<r3=>0x0}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e24, 0xe, @loopback, 0x8001}}, 0x9d95, 0xffffffffffffff00, 0x55, 0xfffffffffffff001, 0x7d}, &(0x7f0000000240)=0x98)

[  658.441164][T29290] bond0: Enslaving bond_slave_1 as an active interface with an up link
19:55:04 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x20000001)
getsockopt(r0, 0x40000000000000ff, 0x0, 0x0, 0x0)

19:55:04 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  658.482170][T29296] bond0: Error: Device is in use and cannot be enslaved
19:55:04 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:55:04 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0xffffffff00000000, 0x0, 0x0})

[  658.526823][T29290] bond0: Releasing backup interface bond_slave_1
19:55:04 executing program 2:
syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x163882)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0)
r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xe616a515aa524868)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x800)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={r3, r4, 0x9, 0x3}, 0x10)
getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
rt_sigqueueinfo(r0, 0x15, &(0x7f0000000280))

[  658.629502][T29316] binder_transaction: 48 callbacks suppressed
[  658.629519][T29316] binder: 29315:29316 transaction failed 29189/-22, size 0-0 line 2995
[  658.659181][T29317] binder: 29307:29317 transaction failed 29201/-22, size 0-0 line 3211
[  658.678952][T29316] binder: 29315:29316 ioctl c0306201 20007000 returned -14
[  658.706615][T26823] binder_release_work: 48 callbacks suppressed
[  658.706624][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  658.736273][T29319] binder: 29315:29319 transaction failed 29201/-22, size 0-0 line 3211
[  658.768049][T29319] binder: 29315:29319 ioctl c0306201 20007000 returned -14
19:55:04 executing program 2:
r0 = socket$kcm(0x10, 0x4000000002, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002000812de45ae087185082cf0300b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0)
r1 = msgget(0x1, 0x442)
msgsnd(r1, &(0x7f0000000180)={0x3, "8fc4c8adc77b215091087f5a88a00a8131f27d3cb89e07190cb2cdef0106e44ef72f613a14dd11dc385de56e91880016491bfbb7745e4f9cfd6044e484d0ca317f681f4f302559547d9a124de027d87eaa6f62fa8be2e89b9356427aafadd7ceda588f532e3a8ffa247094d3256866cc894f2e8bff4538a3a6c7cfb42f8609f19b"}, 0x89, 0x800)
msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/29)

19:55:04 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x2, 0x0})

[  658.789938][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  658.910936][T29325] binder: 29324:29325 transaction failed 29201/-22, size 0-0 line 3211
[  658.930474][T29327] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'.
[  658.954518][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:04 executing program 1:
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000840)={0x0, <r0=>0x0}, &(0x7f0000000880)=0xc)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/mixer\x00', 0x22000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f00000009c0)=0xe8)
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x7fffffff, 0x9, &(0x7f0000000740)=[{&(0x7f0000000100)="bf95090110fcdd76f5568472b861d88b81f74d75ab86b2fba7ec8fe8117c5922c6672b668e3dc83e64ea359eadd1f34bb31eda054a5e9975aa80100030424874048cda0251049191341769b7515e32b786a668dfb770aa70b0f5480edf73794eff43b7f76e904b78bc4697", 0x6b, 0x9}, {&(0x7f0000000180)="822cb190dc71fc23014307bf0dad273e111ebea37ae7332f8b7805b76bb113676e850bc5bdbf812dc8471c97018ceb2a138fc15926b9c1d51645fdae0df501c1961f4f36cb9b47e66a1eb4b9fa4765a36c0662bbf3ff0a0d4c30203180", 0x5d, 0x7f}, {&(0x7f0000000200)="5c464af7b3c72f9aa3c279ba7c731bf70cd1beb8930801b054825dcaf689bf9c208e6a1828b7e0d7ce03f82b74208329e0363243a025b51f9091f34332018efceb3b6e9bf6222576fd00d26588c74e356103dcb971", 0x55, 0x10001}, {&(0x7f0000000300)="471a154fa2e1c61a939505f6060db8c0f6c864fbbe86c42a4e3774ae47e5ef49e4a75feb33b98a5243b4f04bbdb81d8018bb15f2e8aa63f17164ae2b755552b5f187ef804c6e900aeb26f8cf8434ce06feade1d3931997fb32671745", 0x5c, 0x6}, {&(0x7f0000000380)="74dbfce8ef3844f4d47282d215acf87d7d9fa599e76c9e74802006c01ca874855ca4f2a05c702f6e493dd01dfe50fe293fbe9a745a9817edcd46b2f326364cdb901b5e3ba4b944b206ccddf66b9c79dbd6d04121cd3a3b31dd717507aa7f6a5df382b939ed63d80f160a6e517ef78344456ac8daf43af27c4f40c11db81df03d97c5125d275402bbad4d4ef263535a619ea98e451a0c113d2c30946757bc74811e90db940f153086a3b4402ae8028f59e5ffadb076298faf33b7889227b2caec23166f7129960dcc7daf57e2ccbfdafee35d", 0xd2, 0x5}, {&(0x7f0000000280)="c1683fcf7cc0a8a4dafa27bd1437ccd99104921bf45672241efa3f84569f44d2d5ce92687ca92ef2d4c35bdf7037f3f2479e65421eed8e3c2c2d5a1ba6bf", 0x3e, 0x8}, {&(0x7f0000000480)="5deec68c7e1813356be22b778f970b9565ba1c1bea78da22df8cf075ee60f96f4c222b83c6598207c056ffec05556e0d6a7c67082016a756cdac208bd7a3b42a1da7a31decd8225a2565446c32ce2e63413f74397f6847e36599a5365aa51c193f6aaf631e82d43c9f96e955a37c11b828fe89c8e644de49a30086af7d0827b9b0a1ac965d56", 0x86, 0x5}, {&(0x7f0000000580)="08834fc8453fd624e395c069b3e46daacaea84221dc3fe2765914ef792a75f2ba9165192001e67b6952749269ec0c0e25871c9ab166c7f540e40d9dcc57da349308e05ddc4845e4c1872a0a621e1317f60d93509a51506e514d2195b954be08d8e8930e0a5ec7898eea916e4e53ad837e74ae97ed8c1f6b7809ecf970aa815d1aa0c379b4fd771ef708977e3965881ca44899284e5078aacf563001bae102544f45fa7511fb6441ac28ce91f", 0xac, 0x10001}, {&(0x7f0000000640)="5763f10f4eeb4ba11ea35eed50ada89b4648b7d344c1cea6864b2d4f77a2e99de367dadcd87651aed6755458f51b437f2849d7791bec296ddc9b49cab35e94b819e8038bfd22fba9cc64a5e9a4a0948671eeb72b90b0e78d452cef5687edadbcc8f90f11466ecf80be53bf28c16dc968878cd81c9f83ca46d3697ce4c6078e2ac631c5dee92a04d4ec0eb345accb2b4ac0fac46f1a511609f6120ba1ec0287fb545ff25c2ea22749d5225b6862698eeea4c2b65b3d61c98f4dd373b540531c04bc5ceac284b6e3629592ba04a725e76236ad121a5f637ad5cc1054a126ccdf", 0xdf, 0x1}], 0x32, &(0x7f0000000a00)={[{@nodots='nodots'}, {@dots='dots'}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@obj_user={'obj_user'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r0}}, {@smackfsroot={'smackfsroot', 0x3d, 'vmnet1cgroup,+'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@audit='audit'}, {@fsuuid={'fsuuid', 0x3d, {[0x7d, 0x7b, 0x65, 0x32, 0x35, 0x0, 0x65, 0x7f], 0x2d, [0x0, 0x34, 0x3c, 0x77], 0x2d, [0x77, 0x63, 0x7f, 0x36], 0x2d, [0x37, 0x36, 0x7b, 0x7d], 0x2d, [0x37, 0x76, 0x61, 0x74, 0x64bfb4ca3205787a, 0x71, 0x0, 0x32]}}}, {@fowner_lt={'fowner<', r2}}]})
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000f004, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="eb3c906d6b66732e66617400040001ed01000270ff", 0x15, 0x7}], 0x8304, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vga_arbiter\x00', 0x400, 0x0)
sendmsg$tipc(r3, &(0x7f0000002100)={&(0x7f0000000d80)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x3}}, 0x10, &(0x7f0000002000)=[{&(0x7f0000000dc0)="e9842810c830d53514c3065ddb4d187ebd27f2a3120efc", 0x17}, {&(0x7f0000000e00)="34eb42ed47fc7be75a6ccb69c3649065c343b51966136868", 0x18}, {&(0x7f0000000e40)="1961f4b21db02f42a0e0e58af674ff9db8fc325fb1494d962d6cecc093915807bc5d8e805c320c9b535c9c7727c773bfa3661089cf243acd475adfeb0a70edf6868000c1a3202a9a82acf64ee54099ec31a71f01f63973c62336f7f02a54bb7b93e4dfc59849e2e90c586afadff9a27c9d7110c0e28b89f7ed17145f76a9aeb3b5ed0edec5e8c7cb747bc7d96a5d439095fe1a6d3151db3c107f42b3d6bc97f7f99dfc4fa6fad5a50a441f0a84b72de52dffe6c391d318ad7574b8484a101f56a93128dc654554fe1336e56341c7af95f9556b1ea74eecfff57a3ea9a488d035b0920ce327dd66c05623e48e12c8186ff24e264378", 0xf5}, {&(0x7f0000000f40)="86aa70598ecc934bd012c7655b950f46fa07eaf321142b40ca5c556d5217e3f21fb22d2650d525fc11d508b71ebd005b6cd5c134576e0405a22b8552e2273cbc3f4e7ab15b60ac501ca920de698423f2d08a7ea4c258382f34f483ee64fca105dcab06d83f9d18b7c62c675900a01b3e943f6b9cf884687dc3cb883d8d72ce98003852e2f5fdb46ba8bf675922398034ff62ce2c5751ebaf8a2db9b5ec724106e428173ec0f9fb3296aef1c8", 0xac}, {&(0x7f0000001000)="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", 0x1000}], 0x5, &(0x7f0000002080)="0e4607816e4ce3ec0d4f604ce92003bdc488a512cb72aa3a275a4f8932c1511f7420dacf50afdea82b0aacbd45baf3b861ce72d0f65de4e7c49d9311ef36bc7c39d0", 0x42, 0x801}, 0x20000040)

[  658.962197][T29312] binder: 29307:29312 transaction failed 29201/-22, size 0-0 line 3211
[  658.987309][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:04 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x0, 0x300)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10)
close(r0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team0\x00\n\x00L\xff\xff\xff\xc3`\x00', 0x5})

[  659.018422][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  659.026115][T29328] binder: 29324:29328 transaction failed 29201/-22, size 0-0 line 3211
[  659.049740][T29327] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'.
19:55:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  659.097272][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:05 executing program 1:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10)
listen(r0, 0x755)
accept(r0, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x1000000000013)

19:55:05 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x3, 0x0})

19:55:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

[  659.250782][T29340] binder: 29339:29340 transaction failed 29201/-22, size 0-0 line 3211
[  659.275465][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  659.284402][T29345] binder: 29339:29345 transaction failed 29201/-22, size 0-0 line 3211
19:55:05 executing program 2:
r0 = dup(0xffffffffffffffff)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0)
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")

19:55:05 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x1)
mlock2(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x97f1128f5a54c1dd)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0)
ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000040)=0x20)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000180)={0xb7, 0xfff, 0x5, 0x1000, 0x4, [{0x2, 0x800, 0x7, 0x0, 0x0, 0x1}, {0x8, 0xed65, 0xd25, 0x0, 0x0, 0x200}, {0x4, 0x1, 0x6, 0x0, 0x0, 0x1a09}, {0x80, 0xffffffffffff0001, 0x6, 0x0, 0x0, 0x600}]})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, 0x4})

[  659.301667][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:55:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  659.339596][T29347] binder: 29343:29347 transaction failed 29201/-22, size 0-0 line 3211
[  659.378163][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:05 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c1000001000070700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00120010000100697036746e6c00000c00020008000f0000000000"], 0x3c}}, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000001c0)='syz0\x00')
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000100)={0x1ff, 0x0, {0x1, 0x1, 0x0, 0x0, 0xffff}})

[  659.406481][T29356] binder: 29343:29356 transaction failed 29189/-22, size 0-0 line 2995
19:55:05 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f74f76465762f73723000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0x5)
lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00')

[  659.462944][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  659.473748][T29360] binder: BINDER_SET_CONTEXT_MGR already set
[  659.499361][T29360] binder: 29359:29360 ioctl 40046207 0 returned -16
19:55:05 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4, 0x0})

19:55:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:05 executing program 2:
r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x0)
mmap(&(0x7f0000008000/0xe000)=nil, 0xe000, 0x2, 0x24012, r0, 0x0)
mremap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x2000, 0xffffffffffffffff, &(0x7f000000c000/0x2000)=nil)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0x8)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r0, 0x0, 0x7, 0xfff})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x9, 0x11}, 0x8)

19:55:05 executing program 3:
syz_emit_ethernet(0xe, &(0x7f0000000140)={@broadcast, @random="02ef772dcbd2", [], {@generic={0x4305}}}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffff9c})
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5)

[  659.704550][T29374] binder_transaction: 13 callbacks suppressed
[  659.704560][T29374] binder: 29370:29374 got transaction with invalid data ptr
[  659.720387][T29375] binder_transaction: 30 callbacks suppressed
[  659.720400][T29375] binder: 29369:29375 got transaction with unaligned buffers size, 12
[  659.799631][T29381] binder: 29369:29381 got transaction with unaligned buffers size, 12
19:55:05 executing program 1:
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x480001)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00\xeb\xff\xff\xff\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="3b00000042000000ff0300006d"]})

19:55:05 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = memfd_create(&(0x7f0000000140)='\x91\xcc\x80ni\f\xceC\tV\x00\x02}5\xc7I\x8bI\xee\xf4Vy\xee\xd6G\x17\x00\x00\x00\b\x00\x00\x00\x00\x00', 0x0)
ftruncate(r1, 0x40001)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x5, 0xaa344d8354d35737)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'vlan0\x00', 0x2})
sendfile(r0, r1, 0x0, 0xffe4)

19:55:05 executing program 3:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x202000, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000040)=0x63, 0x2)
r1 = gettid()
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x2ef2, 0x20, 0xd9, 0x6, 0x0, 0x1, 0x40, 0x3, 0x6, 0x1, 0x3, 0x2, 0x7fff, 0xfdb, 0x4, 0x100000001, 0x28000000, 0xa1b, 0xfc2a, 0x4adde686, 0x10001, 0x0, 0x20, 0x9, 0x6, 0x1, 0x1000, 0x37c, 0x4, 0x8, 0x81, 0x4, 0x16c, 0x2f2, 0x6, 0x4, 0x0, 0xffff, 0x1, @perf_config_ext={0x3f, 0x1}, 0x4000, 0x4, 0x9, 0x1, 0x9, 0x2, 0xb1}, r1, 0x4, r0, 0xb)
setpriority(0x0, r1, 0x169cd1cf)
setpgid(0x0, r1)

19:55:05 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:05 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x5, 0x0})

19:55:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r1, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:55:06 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6, 0x0})

[  660.163260][T29400] binder: 29398:29400 got transaction with invalid data ptr
[  660.200237][T29406] binder: BINDER_SET_CONTEXT_MGR already set
19:55:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_LINKINFO={0x10, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x3c}}, 0x0)

[  660.243010][T29406] binder: 29398:29406 ioctl 40046207 0 returned -16
[  660.269315][T29407] binder: 29398:29407 got transaction with invalid data ptr
19:55:06 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000200)={0xc0003})
r4 = geteuid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r5=>0x0}, &(0x7f0000000100)=0xc)
getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=<r6=>0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getresgid(&(0x7f0000000740), &(0x7f00000006c0), &(0x7f0000000800)=<r8=>0x0)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}, {0x2, 0x2, r5}], {0x4, 0x1}, [{0x8, 0x5, r6}, {0x8, 0x4, r7}, {0x8, 0x2, r8}, {0x8, 0x0, r9}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x0)

[  660.335875][T29414] binder: 29413:29414 got transaction with unaligned buffers size, 12
19:55:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
sendto$x25(r0, &(0x7f0000000140)="6554d97d866bc747061689793c343e4459323438e6bee0effe2110a6bf9d2233eb9efee549d9467b5106f599bab1279df5585bcbfd2b96c2b45880a7123ffb82dc14fdbc954bc55b33d5e44b8fa39bcb7a8cfc68648c4a1e3c66b737ecb03fc7438f4699b34d2d097250b79c78044072abe3bd954be447875f72d771959a7e8ce3c737ff23ce3f66f047d6789198168355a3c6c4afd786909d426d1aa4d752ddb31f0b0c7600d61d306ac2", 0xab, 0x4800, &(0x7f0000000040)={0x9, @remote={[], 0x2}}, 0x12)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev, 'vxcan1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @broadcast, 'erspan0\x00'}}, 0x1e)

[  660.383304][T29417] binder: 29413:29417 got transaction with unaligned buffers size, 12
19:55:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
sendto$x25(r0, &(0x7f0000000140)="6554d97d866bc747061689793c343e4459323438e6bee0effe2110a6bf9d2233eb9efee549d9467b5106f599bab1279df5585bcbfd2b96c2b45880a7123ffb82dc14fdbc954bc55b33d5e44b8fa39bcb7a8cfc68648c4a1e3c66b737ecb03fc7438f4699b34d2d097250b79c78044072abe3bd954be447875f72d771959a7e8ce3c737ff23ce3f66f047d6789198168355a3c6c4afd786909d426d1aa4d752ddb31f0b0c7600d61d306ac2", 0xab, 0x4800, &(0x7f0000000040)={0x9, @remote={[], 0x2}}, 0x12)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x2, @dev, 'vxcan1\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x0, @broadcast, 'erspan0\x00'}}, 0x1e)

19:55:06 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd3, 0x20100)
accept$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4c000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@gettfilter={0x54, 0x2e, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, r2, {0xd, 0xffed}, {0x0, 0xfff6}, {0xe, 0xffff}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffffffffffff8}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)

19:55:06 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7, 0x0})

[  660.665396][T29431] binder: 29427:29431 got transaction with invalid data ptr
19:55:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x3, 0x7, 0x2, 0x1, 0x98}]}, &(0x7f0000f6bffb)='GPL\x00'}, 0x48)
r1 = dup3(r0, r0, 0x80000)
ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x8})

19:55:06 executing program 2:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80, 0x0)
ioctl$TIOCSBRK(r0, 0x5427)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0xffffffffffffff34, 0x22, 0x1, 0x70bd2d, 0x0, {0x4}, [@nested={0xd0, 0x1, [@typed={0x8, 0x67, @u32=0x401}, @generic, @typed={0x8, 0x1a, @binary="f3"}, @generic="9b12c9acae16fa25ef5dd6a67c23a7c7b7c75a348023c8b7900d60dfbb6622fe1e8981c636510b0e96d4ac606ec8e0e25084d146790d8b277161779d431dec7f0d4b06367ca3ab4dd58a89089ae075a15ad5e5c92e2a4f94a34f8ac7713fc05c109ddf10ee9b318051bff22b818460edf75fea7d393c1d5cd1786fc895d9eccd4b384cb0a11256b9dab81c073af071d8af5bcc2a7447", @typed={0x14, 0x35, @ipv6=@local}, @typed={0x10, 0x54, @str='^Zmd5sum-\x00'}]}]}, 0x170}}, 0x10)

19:55:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
recvmmsg(r1, &(0x7f00000022c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/65, 0x41}, {&(0x7f0000000100)=""/113, 0x71}, {&(0x7f0000000240)=""/219, 0xdb}, {&(0x7f0000000340)=""/173, 0xad}, {&(0x7f0000000400)=""/145, 0x91}], 0x5, &(0x7f00000004c0)=""/85, 0x55}, 0xe381}, {{&(0x7f0000000540)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/230, 0xe6}], 0x1, &(0x7f00000006c0)=""/155, 0x9b}, 0x4}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000780)=""/138, 0x8a}, {&(0x7f0000000840)=""/202, 0xca}, {&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000a40)=""/120, 0x78}, {&(0x7f0000000ac0)=""/84, 0x54}, {&(0x7f0000000b40)}, {&(0x7f0000000b80)=""/7, 0x7}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/107, 0x6b}], 0x9, &(0x7f0000001d00)=""/148, 0x94}, 0x40}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/45, 0x2d}, {&(0x7f0000001e00)=""/100, 0x64}, {&(0x7f0000001e80)=""/74, 0x4a}, {&(0x7f0000001f00)=""/56, 0x38}], 0x4, &(0x7f0000001f80)=""/255, 0xff}, 0x5}, {{&(0x7f0000002080)=@nl, 0x80, &(0x7f0000002200)=[{&(0x7f0000002100)=""/68, 0x44}, {&(0x7f0000002180)=""/71, 0x47}], 0x2, &(0x7f0000002240)=""/77, 0x4d}, 0x3}], 0x5, 0x10020, &(0x7f0000002400))
sendfile(r2, r2, 0x0, 0x20002)

[  660.766141][T29437] binder: 29427:29437 got transaction with invalid data ptr
19:55:06 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:06 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0xa, 0x0})

19:55:06 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r2 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
bind$isdn_base(r2, &(0x7f0000000100)={0x22, 0x10000, 0x6, 0x4, 0x5}, 0x6)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)

19:55:06 executing program 2:
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040)
r2 = socket$inet6(0xa, 0x1000000000002, 0x0)
r3 = epoll_create(0x9)
r4 = epoll_create(0x4)
r5 = socket$rds(0x15, 0x5, 0x0)
r6 = epoll_create(0x400100000001)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f000000e000))
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f000000dff4))
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r7, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f3188b070")
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000001800))

[  660.883222][T29448] binder: 29447:29448 got transaction with unaligned buffers size, 12
[  660.918732][T29451] binder: 29447:29451 got transaction with unaligned buffers size, 12
19:55:06 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:06 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x10, 0x0})

19:55:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
r1 = signalfd4(r0, &(0x7f0000000000)={0x38}, 0x8, 0x17b5d0b27e7b386d)
mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2000004, 0x200031, r1, 0x0)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x4000000000000, &(0x7f0000000040), 0x65)

[  661.063185][T29464] binder: 29459:29464 got transaction with invalid data ptr
19:55:07 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x1)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000363000/0x4000)=nil, 0x4, 0x0, 0x8, &(0x7f0000fff000/0x1000)=nil, 0x800})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5c832, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc)

19:55:07 executing program 1:
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x6f349a3a, 0xca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xc62, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4d7b, 0x800000000105082)
r1 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x400000)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r3=>0x0, 0x6, "ab65c0aaeaad"}, &(0x7f0000000080)=0xe)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x4f106699}, &(0x7f0000000180)=0x8)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, &(0x7f00000ddff8), 0x10200000e)

[  661.118126][T29466] binder: 29465:29466 got transaction with unaligned buffers size, 12
[  661.134376][T29464] binder: BINDER_SET_CONTEXT_MGR already set
[  661.179679][T29464] binder: 29459:29464 ioctl 40046207 0 returned -16
19:55:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:07 executing program 3:
ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000040))
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ce939ada2d0823594b1824ebba8d707a5dd682078e443f8d670ac32c7e6c98ce44ca70a4ddbfe8f748f6b128dda5dae2989444073278f6da9424bb945c40bb"}, 0x60)
sendmmsg$nfc_llcp(r1, &(0x7f00000030c0)=[{&(0x7f00000005c0)={0x27, 0x0, 0x0, 0x7, 0x3, 0x2, "9296c2a42c1d92506350552a35fd3ae1f537854ff2ff6d4133cf7fd61a99f6918d88582132374032fed867f5825695f481ad9b67563f8fc219632a14b0ea4a", 0x37}, 0x60, 0x0}], 0x1, 0x44)
r2 = dup3(r0, r1, 0x80000)
r3 = dup(r2)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={<r4=>0x0, @in6={{0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, [], 0x24}, 0x9}}, 0x7c6, 0x1f}, &(0x7f0000000140)=0x90)
sendmsg$nl_crypto(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000040}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@upd={0xf8, 0x12, 0x20, 0x70bd26, 0x25dfdbfe, {{'drbg_nopr_hmac_sha1\x00'}, [], [], 0x2400, 0x2000}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0xfffffffffffffffd}, {0x8, 0x1, 0x1}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000080}, 0x8044)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r4, @in6={{0xa, 0x4e21, 0xfffffffffffffffc, @dev={0xfe, 0x80, [], 0x1c}, 0x3f}}}, 0x84)

19:55:07 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x48, 0x0})

[  661.476622][T29488] binder: 29487:29488 got transaction with invalid data ptr
19:55:07 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:07 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x80000000000004)
syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x2000)
ioctl$BLKROSET(r0, 0x401870c8, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80, 0x0)
ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x8000, 0x0)
write$P9_RUNLINKAT(r2, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7)

19:55:07 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4c, 0x0})

[  661.568517][T29488] binder: BINDER_SET_CONTEXT_MGR already set
[  661.612489][T29488] binder: 29487:29488 ioctl 40046207 0 returned -16
19:55:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
pidfd_send_signal(r0, 0x0, 0x0, 0x0)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0xbc8, 0xfffffffffffffffa}, 0xb}, 0x10)

19:55:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:07 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x4000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x3)
r2 = dup(r0)
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
ioctl$GIO_CMAP(r2, 0x1269, 0x0)

19:55:07 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x68, 0x0})

19:55:07 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000080)='\xe3\x10syzk\xd0\x81le', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x200008000089f1, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x005\x00', @ifru_flags})
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x1)

[  661.836124][T29509] binder: 29506:29509 got transaction with invalid data ptr
[  661.867155][T29511] binder: 29506:29511 got transaction with invalid data ptr
19:55:07 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
listen(r0, 0x102)
r1 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='bridge_slave_0\x00')
open$dir(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x8800, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0)
write$apparmor_exec(r3, 0x0, 0x1029b)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

19:55:07 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  661.944398][T29516] binder: 29515:29516 got transaction with unaligned buffers size, 12
19:55:07 executing program 2:
socket(0x2000000000000022, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x2, 0x4, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x80000001, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000291000/0x400000)=nil, 0x400000}})

19:55:07 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4080, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000040)={0x18, 0x73, 0x2, {{0x5, 0x2, 0x4}, 0x6d}}, 0x18)

[  662.097567][T29525] binder: 29523:29525 got transaction with invalid data ptr
19:55:08 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:08 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6c, 0x0})

19:55:08 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:08 executing program 1:
mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7ff, 0x2)
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x220000)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080)=0x6c, 0x8)

19:55:08 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000004000034010002bd39f1331e57cc4cb8656e41784f751454a8ed9f811c28d36be7be7da056a5fa52675999df6f0e1484ab1eae8f1f26e6b0b048b5ceafa88580bfe58bd16d9f46482cd9f54c2137f33d5ee87d177e71df215f1e3ac765d8ebcd5915f13518"])

19:55:08 executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000002180)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x88003, 0x0)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000100)={0x1, 0x0, 0x2080, {0xf000, 0x1, 0x1}, [], "5e639e77db1e78bdd9ee9fe8dcb10c23fd46de59a9bc1b245a864c1126d78be0dd0edc42343b98133d8b6aed26eb3d205c37244870eab93710109b4ed5ace2411b6d176f132f0d17b33f98d73afe013dd6a2c87cfc2d0d0ea859abaa66ca63a2e6a0cf2237ef17fa48d1d402c92c69b863d6745fd487a81d7301a1924df8c62c79049d4b16ab0cf609ee585d8112dba50869c3fe9df1fb6b9c269a5f9983043fa9f2700cd504df9e7bb3d1316097143731cc9b5ee494d105a76e26696313d9b4484cce123e8e63e9cd13f9f2dbff8e68816ceed4d4ae05751f10157ae9a9e2758013487898185dcd59ae7b21554b61caba0ce22020f910596584c0f3e1e050ccb52e44ef4c15882f9261f85c6c7e32bb4651bb0fd917ccba0b0d68f39d350a5d084941d2c4dae5178fa08d07ba96166e8ec3b7128eca3c3824a3ca822207e6b83d74c4e34a9e05ccb7b8a3e17d157a788350b2cb7639f92002156ec102cde9664cda9e8380f67ae95df6eaeb73fdd7fb46533a2473d4c607d5390dcc221a4331d1206c934e7333c0e5715ec8bb39aa484d22e5c683ceb5da1575199ac92a346ec96d12c11e6d4b96e419022c5dea125ae981f1fc02f84d059ba84e307d2b6bdb8498c9deca0bc08ecc266df3758fb6c5257e546dbc7ebbe7a5630af936bfd116486c053fe49cb3b86a8967ca182cf148fa055409771d2faceecbb3ebc3223c5606d02031b35179719b6e73fe79e5b9c21c749421ee2cf52b7e1490b6310cb661bfcfa8ac4ccc0176c9d991522b28089380396dfc86dbc7f89220c5b67bb226f85e97ecc5be9b518914ae63e3499386dce1d981b125abb22cb166fe017349f0d8dc22c88de9eef6d30fa2fe4a730ff0e6ad2b3448409b1bd570aa0811c2feddb50a23966e600ce804923f2734b8603ba068f569dc7e08aa43d081bf33749d7ac6b66492f9f691e56919ae4c5398ca680b1091ea0eef2b7cf4f090c369f7c18cf8fab8a429eb19f295d670aa185ce6e3ceb2f9f89e667228338f6db9bbec3cbc30cac3ca6a18c974c4d5fdc08b0c1165da800b6ba230df0850df04e8014e1d6b9b3b6a12290d57bbaa60c0fc1482d8596d22a22f04c6855621dfc1d7d6115299010feb87d3b05115c23e77076cb6bf7538cdaea47c5b52422187de547afc0d9d88a6c8b10614e4a820a70d411b02dc7de00440b80cbfcef4b70dd4a245c39a603c0b25c9cdc7aeda448eaac26b80a605362a9731a1a5b5a801e077969b807e6df930effdf92325b3aa75feb1c3a8d86d6c79c13524399c440da75dc24a3c9e1878142dd9b47b83d462fb73633d49ef16fe1768300832f0b1e87e87704f208131b4e6af156a046914d9ebda7b3766cebcd24c35dc18feb220c8cfe43dcd33a017b4ef1f8d461199320da5ee3674f497850952af894d38cea38a3aee9789b640802e4892cd89107c76ed69e13146eb6078541d2c6614215a5c5752aef0793fedb3de06eb81f910861423484db54d66c817be80635843516b38ba2649713d2c87d6bea5d3ed88190e0aacaaefa86ca6ee56978efad12923439097eb5af9053d3e3384b125726c5e383f8f2581d31b2a7d5c7cb0a046b7fabcda58591e61f3773607c405d3447e6ea72c71db72cac2c38811ed329eeb84d5ea1e45ca3ab42d76ced1cb046587f3c08a2658bc0b400bddc37bf95296dffe5f2db086c8fa75d68739c8f221dff619f628c3c08b7cd2e35e1168dedf1af75505203e8484f4ec3d364384c6f5e2a43c24e6b6b307f718f62d6e4080a958fb0b4fbbdc038f6522aa126f5d3b6de5a87fdf1e37bd3986422f541e4b91c032a0bcb58c70667d2d4b28087859730cc156522d14f032c8fdc74d6022bc65d7fe89e76c38baa4910108a18a22f8e1814bcd710dc62f0eb8e6d57d4f916257c910761d68215eeab193f0f78a11899101a024df81dfedf158e76f7bdd96ac5526e02a38f1b45a1f51fd57e46ec37e6b683773f7090f7f18d0608a17b3ec6fd573a94f9fd0b0c8b44f30ecc6d06111b8b5e4a4ff687e0ac5530c55b60af3aed60cbc7246c2b541342d5e5003a63eff871e1b63a6ac3a723e308a65f57c8d6ff28a53809ccf9f2aa43821185362cc0a98cddc141a7bb9cab48236b79416a3b0fd882b07ddd969f45e11ca41559545e655ae830d768f231dd877f2a26b9a296e74a49eeddb6f9007b645a9d663b185d33140d69ca526c9665c41f965b1f7c44ba5a8e9d955054edcbf1705cbfaed77d7ac8465459a819f465f92c876fd380f2b4b910b980540b15169fc4f708bbdcfc0aae9979a8699de0ec8cce2dadb580266a6be68b4453add3640a04861ae699074b340a8da3abf06d8a26d064bbeac8682ffcec07bc46241caa562419eb69f8aaa14a8603268aedb5d72a3f89c93b426f89fb3870dc843f916f6204c1293f53d7760fb7e28d07f024567b5007a7a8002bab02765d35d628792cc5d917edd2c845275c5ced1ef43fb10061602e4dcdb73b93c36b961ea0599fe95ee37632d62e76eb463101fc76800c2b06a51d51f18103e39eb8d816ca43fa9e6d3ecc82aa4621b8f549bb7e30433519233188d35741a64b24c382ba2c5654eeb502d379bf57b8b41884c26fe3cbc02e4b62ffbf8682ef88104807094565da2d5c4b473896d964b99303a8a7824786e8af03f7fc4aa096081dc8a544f130a448cf5170be254b275736815bbe15a2a10fe3e6795c1d126f64cb1ca90477279aa6aa476a7d5e0a467044a9b32898a924f828c37bfed4801e174251e7e9a8a0cc50e0693f027a43eb8fa3fd7678fa830ea6ede8fc7ef29a2929e4026b71a85d92296650de5e83eff6e22e89b5cdc6de2a0632de8a831c99b59c51f156ea1a00bb0603603c9b43ded2b6f20dbb8c968105f52a144ee6d2011bd7a70d556e27daa34f00fba557c5d17975d554f342ea6177eda7138e245b71455a5e3d43786822ed789b44c6bef017fb2328f6153a65b9019d12108c24d3ea579146c8f2a0067301b13aef884913e4f84a60411f700b874361ac867200db2db0bef371d15fa082b2eb333c7a2314a7e3aa15779307b19796786855ac802a79f571e5c426ac13036e9270409628339a8d27bb1f76511e6b9d83d321a73e0e50beff90fe3a1723adcfc4cd2fcc37cbc08acca0cc0a5187898d491f0e06f48290be57763f31da16dde718bb7403e31809e55d3461a6077215e7c8f9cb0cb916ec0fe3ce3635fbe1e378702a5cb9f48bc74b00226527e1c7dfd7e5359d3967edb368cdef72ea4fbc37f067f9eb3d8e3aa9871b9f999a5d6e4c212eaf18934d57e18c8bfc228ad97b539e4db6cef150ec9098a1a74b4c47b829335ee8c98284762bbbbe9ebf14b58405a25080884352534ad59dc248c57920029e0856483189da17d886f34857e9c40625a09069191c56fce6b5f8bee01192d59bd62ccc0fd174baf3087d9831cf5e06865b7b4bcf5bd7e33e0e06a8340a77d321aa0570001cab23129d6fc228bbc6f898f9cf2a5a4e07731a520339a5bc6eaa866ed8c52c16d861c8989556010b823bd24caa9fbc2c3fa9f7e4e8c1fd577cb7dddaff34d010f5777ea069ed662d3f0ccc820054486ac36d6c549d816ecea506eba133964b8e7499de8d520a4ec0829430b84e74afa3bbc9330cbb65ebd4c2caeede50f66a301853d36b2dfb1b42bb0065877f7d67273d5ec3bb05a1e051a79559c11c31421dfaa23cfaa30e256648732f46bf1554c66348e2adcc5a4bab4689facc74df6f25636f228cab27b6ed43c3419ef3fb9ff76b539daddbf69b424b4be3ccb42e9d749d9c4734e34c275844805e372ae37affe96fee2c0e82c297785fa3986c0760a3463f8474d6f9583a8d79946c899dc91401a36d82ee8f4224430a5a3570412b356bb8321dc3d499564f1195c99b42e840cebc1bde10285dc2a328a43aa2571fe696352bddb90f7e006aeb4a5e1b855d03bb729f29bfe03e7488cc909fb3b78256cb826d0d52d7a8927c64dba8d10fce174f0f668f596c6bd65a1fed5fb6556932446a10b93bfd3ff2a2b9d39a4254d97239fda107ccd4028d5892c96f528c368e133d4291f14badd2352015741dc625ddd535a25f5fcafffd36105864e3f87d3279cc16d210b6aa07e336f1f4b7b25da9deea8ab2163585253964e1e0a79748f7e8e7df99c066c006a5e989aa8bb58f7a05364dfe802f93ef8177df3700ad67f12ba52e8ceb134856ad2ab02420bf69c3fe1bcd46cdac72783d1b81eaa4cb17933bda2a50db4669063a68bafaae895d7222426e2accb3e63c3beaf7b295ab146cfbc1c4897641e7bbc929742f8661b2f7c9c4433285fd19f5e38c855fde2ba1f826de100eebe8abf57d21b66fca1df599d9e5d460470884074cf2c3a46dfd16a6791797fbd56a67ee022c5c87ef7271a8ec3c5ef97b3954bcba8084d2cf1265def9a8ae1ae532f1319a1514c9b3aaf6f9fb8f91d023500a52e910c1491a6944aa67b3c2f469ae9b728176c8a6d9839c290bbcc8d2380c9b7cc2c21542fb11e2660db245b8bd31883025aefc616e0ece7646bca2d53bb0b867ac0faaa5ebddc37a1c4220f10cb595dc52a0ce9e5c5563cb3a0e42eae726ce9ed097e724f38fe4cd331098687e8489b64b7eba85e644c272f6c98806576688b4521e257f293bfdfb1e79875176f41c2abc8a121296009b0dcce9edd31c48e9600b6cb1e036e704f9274e491a2bde27a77f77e91eeda73fa39b8450fe8e2e0cef0fc75736a0f54351520bf3a844d05ed318d2cc6ee7563dd56284f5a814332d0b16b666fedf0f5917ee180a1808f939bf9804eea0581c26115188d25e0b23b78a0e2ab4d87145f1b27c588ce4a7dbf286b7b4c99248e87093a9ce331c50c574e5926ec68efc42c5d0931c6604cf780f4e26a66c5797d4942c63beba128cbfced0c2ef0e4eed949cd1b3895e9410e982ed87b183c86c01aba8bfbe9180bbfca2dbfcab05b296c997ed9750d063a1813eb1d5c29c9ed74139b3b7bdd2beadf3a9c32b3d6f522d2f4cbb6ac653586d177d3e9debc8b124a8b603316c7817710ad39da29bc122b00e01b6a2eb66d8e6649f868acb90d29f90aaf314f49516b6ae5664c2f1529dea054a6b8dc5e53c34f7343747bac205bffe7765a3c026c06c3b1c8abe1095520a0bb33997270e6bfa0beee6249ae5fd6091f722ec214a900522ef1d4c2d54ccdbfa144cef6187ce36a72924abc48a8ee676efcba850c8d3ed3bd33f798b59379f6f8ee9bb41ca1886c8b38711eef6a5f17dfba21ce215e13e2424b9cebb793b79fda38dd501d9af458de158f5e7b8c1e9d48e8861456981f42b3c7c0e590a9e31b0bc135c72b30b2f477f3442b551ef4622f2939a602318603cfe0173eb0587b0c9b737660d768ff03633df72179ecd60eba583680d9b9f09258f193e4881a49ef812c245625d74cd16d7264e713a1d7823d94bc4f5d64e0fb4f3601e71e08462845dde13bd6d13ab405491e37d8748e2bc78313505dc3c92cdbb86557d39eb31bdf995ef2b119db47865c914d0233b62a5198013850a2aa4d37bfa52e67b1ce4758b2e71353b766e3cca5e95354c42640badbfd1406015fc438628ec02fb2b7429c831c79bf91da44c0efc0245fa408ddd44e17ea0f9de5ba3c3da4d88edd5a55a85d9ba170a2eda77e3ccbebd6bd157901ef516b76fd4d2fd07ff83aac02a17eb970ad0fe3a015de6a1f420c7fb5376a25455e19f9f13c0943d019309445e220c0385b00064e2807f7b24a7e0329d5c44e62af62010033", "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"})
write$ppp(r1, &(0x7f0000000040)="797cdb92fe518e55a9d8ff8cf5224825fd2d9a5e4ccad4c74d67fd426c272bbcc77effcd0c2ca3eb7036079ea93f2c83bc95f70043e4d288e0ea98500fc705b2f46957b59e424766858540c0fe84164f2171046fa1ccf0f43c16144f92307f604108ef3d8503d9714fbe65ddfedfdfa24e822fbdd4a0382e048956f13df3e9aa0ece83e9388ad389223024bab416ec137a91252874f78fe2ef0828", 0x9b)
r2 = epoll_create(0x0)
mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0)
mremap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x7ffffffff000, 0x3, &(0x7f0000013000/0x4000)=nil)

19:55:08 executing program 3:
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
umount2(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0xffff, 0x4)
bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$unix(r0, &(0x7f0000001300)={&(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}, 0x0)

[  662.911573][T29554] binder: BINDER_SET_CONTEXT_MGR already set
19:55:08 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x74, 0x0})

[  662.978624][T29554] binder: 29544:29554 ioctl 40046207 0 returned -16
19:55:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  663.095019][T29566] binder: 29565:29566 got transaction with unaligned buffers size, 12
19:55:09 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000004000034010002bd39f1331e57cc4cb8656e41784f751454a8ed9f811c28d36be7be7da056a5fa52675999df6f0e1484ab1eae8f1f26e6b0b048b5ceafa88580bfe58bd16d9f46482cd9f54c2137f33d5ee87d177e71df215f1e3ac765d8ebcd5915f13518"])

19:55:09 executing program 3:
clone(0x4100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000040))
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4204, r0, 0x0, 0x2)
tkill(r0, 0xa)
ptrace$cont(0x4202, r0, 0x0, 0xa05000)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={<r2=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={[], 0x8, 0x3, 0x9, 0xaf9, 0x1, r2})

19:55:09 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000440)="0adc01124c128569e4a61978951f1f8fc2ca8c29efd13cc0022985bc7426c9597ac90ff718089b44bb9e8b9b8202e25a71c3ac5a1d41250099e1a6cf3ceaec15d32dd44350cfdf50fe02e5f82af893ec2b17bda751797992e4494a5dc2b3556611caa7ad4345cc0000000000000000000000000000005792ac49d0df3407b6c7ed215de3747004104b")
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x161200, 0x0)
write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, 0x4, {0x4}}, 0x18)
r2 = socket$key(0xf, 0x3, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000300)={0xffffffffffff4414, 0x8b5, 0x0, {0x3, @sdr={0x3436324d, 0xa7d}}})
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x80)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000700)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000740)={'vcan0\x00', r4})
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200140002000000400000000000000005000600200000000a00000000000000000500e500000766e3d8ce177beddc4d8e7c0000001f00000000000003000000000000020001008000020000000002000000000500050000009f000a0000ff170000000000000000000000000017000000000000000000000000004439c76ddd4c2ced70badcf139f76b67061e93598a73fec417c6e0bb0270a8aca3ea9cb6f6de552b7d2b952e20aaef7e9aa63a0899414efae668b9cfafb1cf745357dea9a8b7242f5c2345739d86c3cc"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000180), 0x32f0460fe8298b6, 0x0)

[  663.235412][T29574] binder: 29565:29574 got transaction with unaligned buffers size, 12
19:55:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:55:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:09 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7a, 0x0})

19:55:09 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x5a59, @local, 0x80000000000}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="f647dfdbede7146ceec6983bbfcffe5dac1fb483c6b9937ef73294b567e1fbc261c7cecf448e230d73", 0x29}, {&(0x7f0000000200)="3413cab116644806927a16f5d723869e4ef723a7e2f3b610355c699c64862fcf26c3ba63fb4a4cd884491e9ad0daf80cda92b3a5f68b270ea02d69369c88c217fa351099d00723a8c3d0ef36201d9fdf0b4d9f779f9089b7e9c09aeb1c989e57942c9e60d4c805ba353d64a018452e8de343b94886718d25efaf6c2a3a3b770789593f124555de5d29b0d2942dc671a78afbd9ff671f56aad6364487cfc46c340101f45720b15d4fd6ea2b1e70b438d749418057122bd2ea5ada52a199be47f1c4f30e6716cf66c493596873560677d06a", 0xd1}], 0x2}, 0x20000080)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000001a0081522a38dd6bc25228e8499541e70014c838dfecff0e00fa0708c0b0bd59e72b35c0e701570c0b2e", 0x2e}], 0x1}, 0x0)

19:55:09 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c)
listen(r1, 0x20000003)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10)
r2 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
socket$pppoe(0x18, 0x1, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="030000000004000034010002bd39f1331e57cc4cb8656e41784f751454a8ed9f811c28d36be7be7da056a5fa52675999df6f0e1484ab1eae8f1f26e6b0b048b5ceafa88580bfe58bd16d9f46482cd9f54c2137f33d5ee87d177e71df215f1e3ac765d8ebcd5915f13518"])

19:55:09 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x80000006}]}, 0x10)
r1 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8443, 0x0)
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000040)={0x3, 0x0, 0x4, [], &(0x7f0000000140)})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0)
ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000100)={0x8, 0x7fff, 0x4, 0x9, 0x2, 0x15, 0x1d, "f2ce5acf835983c80c67afdef1bdf01bebf36b16", "0c159c490fd4e5caa51dc815cb6071f99102b65b"})
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r3, &(0x7f000000ac80), 0x66, 0x0)

19:55:09 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:09 executing program 3:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x20201)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xd)
write(r1, &(0x7f0000000040)="a1", 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCFLSH(r1, 0x5437, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='hfs\x00', 0x0, 0x0)
set_thread_area(&(0x7f0000000040)={0x0, 0x0, 0x400, 0x80000001, 0x3, 0x7f, 0x6000000000000, 0x8, 0x1, 0x8001})

19:55:09 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x300, 0x0})

19:55:09 executing program 2:
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="0ae81f12291c222cf818c4")
r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9)
getpgrp(0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)
sendfile(r2, r2, &(0x7f0000000040), 0x4)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x1004, 0x2000})
sendfile(r2, r2, &(0x7f0000000240), 0x808100003d00)

[  663.752874][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  663.758831][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  663.806502][T29613] binder_transaction: 46 callbacks suppressed
[  663.806522][T29613] binder: 29611:29613 transaction failed 29201/-14, size 96-0 line 3180
[  663.833387][T29615] binder: 29614:29615 transaction failed 29201/-22, size 0-0 line 3211
[  663.881056][ T2489] block nbd3: Attempted send on invalid socket
[  663.888543][ T2489] print_req_error: 1316 callbacks suppressed
[  663.888571][ T2489] print_req_error: I/O error, dev nbd3, sector 2 flags 0
[  663.922559][T29616] hfs: can't find a HFS filesystem on dev nbd3
[  663.930631][ T7967] binder_release_work: 46 callbacks suppressed
[  663.930640][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  663.932194][T29622] binder: 29614:29622 transaction failed 29201/-22, size 0-0 line 3211
[  663.982243][ T2489] block nbd3: Attempted send on invalid socket
[  663.988860][ T2489] print_req_error: I/O error, dev nbd3, sector 2 flags 0
[  663.997229][T29612] hfs: can't find a HFS filesystem on dev nbd3
[  664.007974][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  664.017826][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  664.021040][T29613] binder: BINDER_SET_CONTEXT_MGR already set
19:55:09 executing program 3:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
clone(0x2102001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x20201)
ioctl$TCXONC(r1, 0x540a, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xd)
write(r1, &(0x7f0000000040)="a1", 0x1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000100))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCFLSH(r1, 0x5437, 0x0)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='hfs\x00', 0x0, 0x0)
set_thread_area(&(0x7f0000000040)={0x0, 0x0, 0x400, 0x80000001, 0x3, 0x7f, 0x6000000000000, 0x8, 0x1, 0x8001})

[  664.056155][T29613] binder: 29611:29613 ioctl 40046207 0 returned -16
19:55:10 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x500, 0x0})

[  664.107561][T29624] binder: 29611:29624 transaction failed 29189/-22, size 96-0 line 2995
[  664.143051][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  664.183381][T29625] syz-executor.0 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  664.260005][T29625] CPU: 0 PID: 29625 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  664.264863][ T2489] block nbd3: Attempted send on invalid socket
[  664.267955][T29625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  664.267965][T29625] Call Trace:
[  664.267995][T29625]  dump_stack+0x172/0x1f0
[  664.268018][T29625]  dump_header+0x10f/0xb6c
[  664.268038][T29625]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  664.268055][T29625]  ? ___ratelimit+0x60/0x595
[  664.268073][T29625]  ? do_raw_spin_unlock+0x57/0x270
[  664.268089][T29625]  oom_kill_process.cold+0x10/0x15
[  664.268108][T29625]  out_of_memory+0x79a/0x1280
[  664.268128][T29625]  ? lock_downgrade+0x880/0x880
[  664.268145][T29625]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  664.268162][T29625]  ? oom_killer_disable+0x280/0x280
[  664.268188][T29625]  ? find_held_lock+0x35/0x130
[  664.274558][ T2489] print_req_error: I/O error, dev nbd3, sector 2 flags 0
[  664.284587][T29625]  mem_cgroup_out_of_memory+0x1ca/0x230
[  664.284602][T29625]  ? memcg_event_wake+0x230/0x230
[  664.284621][T29625]  ? do_raw_spin_unlock+0x57/0x270
[  664.284636][T29625]  ? _raw_spin_unlock+0x2d/0x50
[  664.284660][T29625]  try_charge+0x102c/0x15c0
[  664.291756][T29631] hfs: can't find a HFS filesystem on dev nbd3
[  664.292293][T29625]  ? find_held_lock+0x35/0x130
[  664.292319][T29625]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  664.292334][T29625]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  664.292349][T29625]  ? find_held_lock+0x35/0x130
[  664.292380][T29625]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  664.300998][T29634] binder: 29633:29634 transaction failed 29189/-22, size 0-0 line 2995
[  664.302652][T29625]  __memcg_kmem_charge_memcg+0x7c/0x130
[  664.302670][T29625]  ? memcg_kmem_put_cache+0xb0/0xb0
[  664.302688][T29625]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  664.302705][T29625]  __memcg_kmem_charge+0x136/0x300
[  664.302732][T29625]  __alloc_pages_nodemask+0x437/0x7e0
[  664.443494][T29625]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  664.449771][T29625]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  664.455533][T29625]  ? __kmalloc_node+0x3d/0x70
[  664.460238][T29625]  ? kasan_unpoison_shadow+0x35/0x50
[  664.465544][T29625]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  664.471815][T29625]  alloc_pages_current+0x107/0x210
[  664.476980][T29625]  ? ___might_sleep+0x163/0x280
[  664.481856][T29625]  __vmalloc_node_range+0x4b0/0x790
[  664.487115][T29625]  __vmalloc+0x44/0x50
[  664.491214][T29625]  ? vmx_vm_alloc+0x44/0x60
[  664.495741][T29625]  vmx_vm_alloc+0x44/0x60
[  664.500312][T29625]  kvm_dev_ioctl+0x1ba/0x15e0
[  664.505017][T29625]  ? kvm_debugfs_release+0x90/0x90
[  664.510150][T29625]  ? __fget+0x35a/0x550
[  664.514332][T29625]  ? kvm_debugfs_release+0x90/0x90
[  664.519468][T29625]  do_vfs_ioctl+0xd6e/0x1390
[  664.524079][T29625]  ? ioctl_preallocate+0x210/0x210
[  664.529214][T29625]  ? smack_file_ioctl+0x196/0x310
[  664.534259][T29625]  ? smack_inode_rename+0x2d0/0x2d0
[  664.539505][T29625]  ? nsecs_to_jiffies+0x30/0x30
[  664.544380][T29625]  ? tomoyo_file_ioctl+0x23/0x30
[  664.549352][T29625]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  664.555618][T29625]  ? security_file_ioctl+0x93/0xc0
[  664.560765][T29625]  ksys_ioctl+0xab/0xd0
[  664.564963][T29625]  __x64_sys_ioctl+0x73/0xb0
[  664.569587][T29625]  do_syscall_64+0x103/0x610
[  664.574212][T29625]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  664.580215][T29625] RIP: 0033:0x458c29
[  664.584127][T29625] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  664.603741][T29625] RSP: 002b:00007fe5bd58ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  664.612177][T29625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  664.620173][T29625] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  664.628163][T29625] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  664.636175][T29625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd58f6d4
[  664.644161][T29625] R13: 00000000004c1788 R14: 00000000004d3f68 R15: 00000000ffffffff
[  664.652631][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  664.652801][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  664.658478][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  664.664279][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  664.670098][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  664.681648][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  664.700931][T29625] memory: usage 307200kB, limit 307200kB, failcnt 222
[  664.708789][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  664.710185][T29625] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  664.738563][T29625] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  664.784702][T29625] Memory cgroup stats for /syz0: cache:0KB rss:267556KB rss_huge:256000KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:267584KB inactive_file:0KB active_file:0KB unevictable:4KB
[  664.839181][T29625] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26269,uid=0
[  664.864150][T29625] Memory cgroup out of memory: Killed process 26269 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  664.897729][T29626] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  664.912572][T29626] CPU: 1 PID: 29626 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  664.921018][T29626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  664.931333][T29626] Call Trace:
[  664.934753][T29626]  dump_stack+0x172/0x1f0
[  664.939171][T29626]  dump_header+0x10f/0xb6c
[  664.943648][T29626]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  664.949557][T29626]  ? ___ratelimit+0x60/0x595
[  664.954283][T29626]  ? do_raw_spin_unlock+0x57/0x270
[  664.959429][T29626]  oom_kill_process.cold+0x10/0x15
[  664.964564][T29626]  out_of_memory+0x79a/0x1280
[  664.969418][T29626]  ? oom_killer_disable+0x280/0x280
[  664.974655][T29626]  ? find_held_lock+0x35/0x130
[  664.979445][T29626]  mem_cgroup_out_of_memory+0x1ca/0x230
[  664.985171][T29626]  ? memcg_event_wake+0x230/0x230
[  664.990297][T29626]  ? do_raw_spin_unlock+0x57/0x270
[  664.995532][T29626]  ? _raw_spin_unlock+0x2d/0x50
[  665.000440][T29626]  try_charge+0xa87/0x15c0
[  665.005035][T29626]  ? find_held_lock+0x35/0x130
[  665.009817][T29626]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  665.015627][T29626]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  665.021601][T29626]  ? find_held_lock+0x35/0x130
[  665.027519][T29626]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  665.033115][T29626]  __memcg_kmem_charge_memcg+0x7c/0x130
[  665.038696][T29626]  ? memcg_kmem_put_cache+0xb0/0xb0
[  665.044911][T29626]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  665.050604][T29626]  __memcg_kmem_charge+0x136/0x300
[  665.056020][T29626]  __alloc_pages_nodemask+0x437/0x7e0
[  665.061505][T29626]  ? ___perf_sw_event+0x393/0x570
[  665.066655][T29626]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  665.072588][T29626]  ? is_dynamic_key+0x1c0/0x1c0
[  665.077617][T29626]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  665.084209][T29626]  alloc_pages_current+0x107/0x210
[  665.089341][T29626]  pte_alloc_one+0x1b/0x1a0
[  665.093877][T29626]  __handle_mm_fault+0x3491/0x3ec0
[  665.099032][T29626]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  665.104594][T29626]  ? find_held_lock+0x35/0x130
[  665.109523][T29626]  ? handle_mm_fault+0x322/0xb30
[  665.114497][T29626]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  665.120851][T29626]  ? kasan_check_read+0x11/0x20
[  665.125961][T29626]  handle_mm_fault+0x43f/0xb30
[  665.130763][T29626]  __do_page_fault+0x5ef/0xda0
[  665.135849][T29626]  do_page_fault+0x71/0x581
[  665.140587][T29626]  ? page_fault+0x8/0x30
[  665.145013][T29626]  page_fault+0x1e/0x30
[  665.149919][T29626] RIP: 0033:0x458c29
[  665.154293][T29626] Code: Bad RIP value.
[  665.158388][T29626] RSP: 002b:00007fe5bd5afc78 EFLAGS: 00010246
[  665.164959][T29626] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000458c29
[  665.173346][T29626] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[  665.181363][T29626] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  665.190955][T29626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd5b06d4
[  665.199811][T29626] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  665.208914][T29626] memory: usage 300928kB, limit 307200kB, failcnt 225
[  665.215840][T29626] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  665.223440][T29626] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  665.230332][T29626] Memory cgroup stats for /syz0: cache:0KB rss:261332KB rss_huge:249856KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:261344KB inactive_file:0KB active_file:0KB unevictable:4KB
[  665.252673][T29626] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26316,uid=0
[  665.268109][T29626] Memory cgroup out of memory: Killed process 26316 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  665.285295][ T1043] oom_reaper: reaped process 26316 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[  665.309918][T29605] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  665.320982][T29605] CPU: 1 PID: 29605 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  665.329113][T29605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  665.339786][T29605] Call Trace:
[  665.343110][T29605]  dump_stack+0x172/0x1f0
[  665.347488][T29605]  dump_header+0x10f/0xb6c
[  665.352003][T29605]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  665.357834][T29605]  ? ___ratelimit+0x60/0x595
[  665.362460][T29605]  ? do_raw_spin_unlock+0x57/0x270
[  665.367607][T29605]  oom_kill_process.cold+0x10/0x15
[  665.372866][T29605]  out_of_memory+0x79a/0x1280
[  665.377672][T29605]  ? retint_kernel+0x2d/0x2d
[  665.382423][T29605]  ? oom_killer_disable+0x280/0x280
[  665.389957][T29605]  mem_cgroup_out_of_memory+0x1ca/0x230
[  665.395549][T29605]  ? memcg_event_wake+0x230/0x230
[  665.400653][T29605]  ? do_raw_spin_unlock+0x57/0x270
[  665.406043][T29605]  ? _raw_spin_unlock+0x2d/0x50
[  665.410915][T29605]  try_charge+0xa87/0x15c0
[  665.415339][T29605]  ? find_held_lock+0x35/0x130
[  665.420163][T29605]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  665.425995][T29605]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  665.433786][T29605]  ? kasan_check_read+0x11/0x20
[  665.439944][T29605]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  665.445892][T29605]  mem_cgroup_try_charge+0x24d/0x5e0
[  665.451459][T29605]  mem_cgroup_try_charge_delay+0x1f/0xa0
[  665.457434][T29605]  wp_page_copy+0x408/0x1740
[  665.462268][T29605]  ? find_held_lock+0x35/0x130
[  665.467226][T29605]  ? pmd_pfn+0x1d0/0x1d0
[  665.471495][T29605]  ? lock_downgrade+0x880/0x880
[  665.476711][T29605]  ? swp_swapcount+0x540/0x540
[  665.482114][T29605]  ? kasan_check_read+0x11/0x20
[  665.487112][T29605]  ? do_raw_spin_unlock+0x57/0x270
[  665.492949][T29605]  do_wp_page+0x48e/0x1500
[  665.497394][T29605]  ? finish_mkwrite_fault+0x4f0/0x4f0
[  665.502951][T29605]  __handle_mm_fault+0x22e8/0x3ec0
[  665.508099][T29605]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  665.513653][T29605]  ? find_held_lock+0x35/0x130
[  665.518644][T29605]  ? handle_mm_fault+0x322/0xb30
[  665.523596][T29605]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  665.529858][T29605]  ? kasan_check_read+0x11/0x20
[  665.534746][T29605]  handle_mm_fault+0x43f/0xb30
[  665.539551][T29605]  __do_page_fault+0x5ef/0xda0
[  665.544339][T29605]  do_page_fault+0x71/0x581
[  665.548886][T29605]  ? page_fault+0x8/0x30
[  665.553156][T29605]  page_fault+0x1e/0x30
[  665.557433][T29605] RIP: 0033:0x404c58
[  665.561448][T29605] Code: a4 02 00 00 80 3d 3f b8 64 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 2c b8 64 00 39 45 24 0f 84 f7 01 00 00 44 8b a5 80 00 00 00 <e8> 13 d2 ff ff 48 2b 05 ac 33 33 00 8b 75 00 49 89 d8 45 89 e1 4c
[  665.581420][T29605] RSP: 002b:00007fe5bd5afc90 EFLAGS: 00010246
[  665.587732][T29605] RAX: 00007fe5bf5b1000 RBX: 00000000000009fe RCX: 0000000000458c29
[  665.595944][T29605] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000
[  665.604787][T29605] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  665.613331][T29605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  665.621894][T29605] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  665.633566][T29605] memory: usage 294528kB, limit 307200kB, failcnt 225
[  665.641491][T29605] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  665.650120][T29605] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  665.657626][T29605] Memory cgroup stats for /syz0: cache:0KB rss:255136KB rss_huge:243712KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:255108KB inactive_file:0KB active_file:0KB unevictable:4KB
[  665.683648][T29605] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26361,uid=0
[  665.700057][T29605] Memory cgroup out of memory: Killed process 26361 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  665.719971][ T1043] oom_reaper: reaped process 26361 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
19:55:11 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:55:11 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:11 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = accept4$rose(0xffffffffffffff9c, &(0x7f00000000c0)=@full={0xb, @dev, @null, 0x0, [@remote, @default, @null, @null, @default, @default]}, &(0x7f0000000100)=0x40, 0x80800)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="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")
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r1, &(0x7f0000000040)={{0x3, @remote, 0x1}, [@null, @null, @default, @null, @bcast, @default, @rose, @default]}, 0x48)
close(r1)

19:55:11 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x600, 0x0})

19:55:11 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00\x06\"\xce[\x94:\xc1F\xd4\xb7^\v\x1e;\xed\xc1\xe9\xd0<g\xfe\xd7v\xe3\x9c\x05\xf8\xa5^\xf6|)\x90\x10\x897X\xb6\x80', 0x200002, 0x0)
ioctl(r0, 0x9, &(0x7f0000000040)="91fed484edade6e9ba4f822dfe75df646809e9f5db01eb4cfc2c76a00d53bb4e6358c452f48eb1073ac03b5ecbc6fa07cdcba320dfe43479b8ce7ce5fbbd5b57dd05acf9913ae56409a6f479151884897c39ce102fa7b863f3da39ceaf4ad22cc878512c714d220c4b48fcf323dfefb51eb850f8c2d51d7357c1dd548c615d6730b24748ea4b29191cc8fe854c2593f97e9b7a50d989b42790a9819139997e6f2d13799f75c3480a8275f9c1a76d9f89")
r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x4)

19:55:11 executing program 1:
clone(0xfffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x96000003, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
tkill(r0, 0x16)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x4)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x65, 0x60})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  665.974034][T29645] binder_transaction: 8 callbacks suppressed
[  665.974045][T29645] binder: 29644:29645 got transaction with invalid data ptr
[  665.974695][T29653] binder_transaction: 4 callbacks suppressed
[  665.974707][T29653] binder: 29651:29653 got transaction with unaligned buffers size, 12
[  665.981604][T29645] binder: 29644:29645 transaction failed 29201/-14, size 104-0 line 3180
19:55:11 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x35, &(0x7f00000002c0)={0x1}, 0x8)
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)

19:55:11 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'security\x00'}, &(0x7f00000001c0)=0x54)
r3 = socket$alg(0x26, 0x5, 0x0)
clock_gettime(0x0, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000000680)={&(0x7f0000000300)=@in6={0xa, 0x4e20, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}, 0xbbef}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="74ae96d6ef1a91e254320215cae41e124100f6456abe2f82a476ce7221f2163c222f59383d48e5cd2a76c2", 0x2b}, {&(0x7f0000000380)="083c6248584f1a10f2fc8269199202eb3c559557e08179bfde0e43de75f2e4f68a069086104ea580667dbce143b3da08d6b2c721ecddfe786393bae4bd084022d8af4058", 0x44}, {&(0x7f0000000400)="ecf9dc17a2c0324ef79a6326e431b2857024ac2aebeb246672c63443717ca7e3bdcece7391e8ff11476b3da2120b641527566d8c426317d455b4f61c4ac840eec90674081088a4e7d4233b40101710350f87e4bcab1cca45b5eeef55e76796b742d9e836755d527960e4d4a3f7bd9a1af99491003985055664b4e70af37e85949e260ab8624734ba167bf37b3bd27a609b8585cf3d1d401870060b9ae59a70340dec8bc5d8fef6e27b751ce6c5eea42c53787e04d1754351865b2026170a5b2489451143ca83154c14a86001b43de600224b", 0xd2}, {&(0x7f0000000500)="34e08d0ab808f8b537c5b6f377ac8b29d9334d3bd38fb28a184a33098a0d7236f75c3763850f81d8519495626c3dcd889308db6deb50006cca1ca0df3841d90bc6a022041552b31ea606cff9c7e6897f784d82cea2787c8b5cc7d0fcda97ccf8dd0d920bc607b8f2eb94183db800ef1d7bfd954383c870bcbf8b88f84c7b6dcab7f54371fb9f4c9beab1ff9db3a30a74de8d9085a13fba9e7b4e7a5a97fa1dfcb05c7c36ace4b534228a1635e43c36d01b16c73d19e8dfe41cb432a033e08ce579b137d3e25b28750a896fa89f9045abd02e3825ba211c50356038783e2b736f", 0xe0}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000007000000e0000002000000001800000000200000000100"/48], 0x30, 0x4000}, 0x4008080)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000006c0)={@in6={{0xa, 0x4e24, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, 0x0, 0x8, 0x0, "108fdc7b2f96b390195a4ce4a94d9859bbe42d93dcbaabf29ec98b5e59aaaa94a020c6ad080ac4ff715c430dd432ff8dd90248377a977810abb71668be8d29a5d0ea0d7bd172e5ad26bc1f6ef3c3203f"}, 0xd8)
bind$alg(r3, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/247)
r4 = accept$alg(r3, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x200086c0, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

[  666.040320][T29653] binder: 29651:29653 transaction failed 29201/-22, size 0-0 line 3211
[  666.114584][T29661] binder: 29651:29661 got transaction with unaligned buffers size, 12
[  666.128812][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  666.161790][T29661] binder: 29651:29661 transaction failed 29201/-22, size 0-0 line 3211
[  666.168635][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  666.180914][T29666] binder: 29644:29666 got transaction with invalid data ptr
[  666.189185][T29666] binder: 29644:29666 transaction failed 29201/-14, size 104-0 line 3180
[  666.199306][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:12 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x20000, 0x0)
ioctl(r0, 0x0, &(0x7f0000000080)="a72630dbef07d4f1da881cb1e615f26b962b31f0741867819b58255296e1953c7a7e70305241111885e33c374291d80d1284e22405265dea381b9aeaa371574a31f57cb412a1f040e43fc604a2a9022640a93b13b92f82f8cec91e4bdcf9560f6c621fbfd9ad892ab8d8fc42f2f9cdbcc90353c678873b1b0498871bcf6d9b2a")
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0xa0200)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/189)
sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$addseals(r2, 0x409, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

[  666.243432][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:55:12 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x700, 0x0})

[  666.510699][T29674] binder: 29671:29674 got transaction with invalid data ptr
[  666.538074][T29674] binder: 29671:29674 transaction failed 29201/-14, size 108-0 line 3180
[  666.589749][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  666.648103][T29674] binder: BINDER_SET_CONTEXT_MGR already set
[  666.673820][T29674] binder: 29671:29674 ioctl 40046207 0 returned -16
19:55:12 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  666.980828][T29685] binder: 29680:29685 got transaction with invalid data ptr
[  667.032635][T29685] binder_alloc: 29680: binder_alloc_buf, no vma
19:55:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = eventfd(0x10001)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000015c0)={r3, 0x0, 0x2, r3})

19:55:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:13 executing program 2:
sendto$inet6(0xffffffffffffffff, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0)
mremap(&(0x7f0000e6b000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mbind(&(0x7f0000189000/0xd000)=nil, 0xd000, 0x4003, &(0x7f0000000000)=0x3d32, 0x6, 0x0)
mlock2(&(0x7f0000163000/0x2000)=nil, 0x2000, 0x0)
madvise(&(0x7f0000473000/0x1000)=nil, 0x1000, 0x8)

19:55:13 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0xa00, 0x0})

[  667.288481][T29691] binder: 29689:29691 got transaction with invalid data ptr
[  667.299504][T29692] binder: 29689:29692 got transaction with invalid data ptr
19:55:13 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  667.411424][T29699] binder: 29698:29699 got transaction with unaligned buffers size, 12
[  667.556165][T29702] binder: 29701:29702 got transaction with invalid data ptr
[  667.567929][T29703] binder: 29698:29703 got transaction with unaligned buffers size, 12
[  667.594586][T29706] binder: 29701:29706 got transaction with invalid data ptr
19:55:14 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x44000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0380a100"/16], 0x28}}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x100000001, 0x40)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'ip_vti0\x00', 0x1f})
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x4000001)

19:55:14 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000140))
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000300)='/\x00', 0x2, 0x2)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100), 0x28)

19:55:14 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:14 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4800, 0x0})

19:55:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0)

19:55:14 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x26a, &(0x7f00000003c0)={&(0x7f0000000040)={0x12, 0xfffffffffffffffe, 0x2, 0x800000001}, 0xffffffffffffffdd}}, 0x20000000)
syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2)

[  668.976875][T29720] tls_set_device_offload_rx: netdev lo with no TLS offload
[  668.985674][T29719] binder_transaction: 10 callbacks suppressed
[  668.985693][T29719] binder: 29712:29719 transaction failed 29189/-22, size 0-0 line 2995
[  668.989905][T29721] binder: 29712:29721 transaction failed 29189/-22, size 0-0 line 2995
[  669.014064][ T7967] binder_release_work: 10 callbacks suppressed
[  669.014073][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  669.028550][T29716] binder: 29715:29716 got transaction with invalid data ptr
[  669.034771][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  669.052996][T29716] binder: 29715:29716 transaction failed 29201/-14, size 1280-0 line 3180
19:55:14 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4c00, 0x0})

[  669.089533][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  669.092303][T29724] IPVS: ftp: loaded support on port[0] = 21
[  669.119736][T29729] binder: 29715:29729 got transaction with invalid data ptr
19:55:15 executing program 2:
unshare(0x20020000)
mkdir(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff)
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='devpts\x00vh\xd2p!s\n@ha.\xc1\x88\x05\x89\x1d\b\xb3Xd\x92Y\x1b\x8c\xc0\xd0\xf4\x952\x8c!JC\xd1]Ul\xa2\x80\x19\x88 \xd4b\x0f\x87\x89P\xb4M\xf7]w\xa9\xb6\xc3}\x16\f\x87ueg$\xd9,\x8c\x9b\xbb*\xfe\x95\xb8\xa1\x9aVA\xb73w\xdf/\xa9\xc5\x8e\xe1\xef\xc5\x8d\x168\xba\"\x83\x8b\xe2\xf7*\xfa\xd20a\x94\xc7yiF\a\v\x14\xd2\xc1z\x94\x9d\x9d\a*\xab\xea\xd9Ee\xac\xa28p\xa2\xa1\x9a;\xb4o\xa0\xf1\xd7&[2\xf2\x82\xbc\xc2tu\xfb\xf5\xb1Y\xd6\xa9\x1b\xbec\xdeA\x8d\x94W)\x93,\xac\x02\x86\xd1\r\x00\xefZ\xf3Y\x84\xdbF\xf2u\xa1\x8b_\x9fe\xfe[q\xb1\\\xcen\bC \x81', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @reserved})
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')

[  669.170564][T29729] binder: 29715:29729 transaction failed 29201/-14, size 1280-0 line 3180
[  669.197123][T29731] binder: 29730:29731 got transaction with unaligned buffers size, 12
[  669.213888][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:55:15 executing program 3:
r0 = memfd_create(&(0x7f00000000c0)='.\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc05c5340, &(0x7f00000001c0)={0x0, @tick=0xeb, 0x0, {}, 0x9, 0x0, 0x2})
fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x3)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000080)={0x4, {0x1, 0x9, 0x7, 0x8, 0x1, 0x9}})
ioctl$TCGETX(r2, 0x5432, &(0x7f0000000000))

[  669.233069][T29731] binder: 29730:29731 transaction failed 29201/-22, size 0-0 line 3211
19:55:15 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  669.289314][   T17] binder: undelivered TRANSACTION_ERROR: 29201
[  669.297067][T29739] binder: 29730:29739 transaction failed 29189/-22, size 0-0 line 2995
[  669.356124][T26823] binder: undelivered TRANSACTION_ERROR: 29189
19:55:15 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6800, 0x0})

[  669.418958][T29744] binder: 29743:29744 transaction failed 29201/-14, size 1536-0 line 3180
19:55:15 executing program 3:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4c00, 0x0})

[  669.537027][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  669.565830][T29758] binder: 29743:29758 transaction failed 29201/-14, size 1536-0 line 3180
[  669.574988][T29753] binder: 29752:29753 got transaction with unaligned buffers size, 12
[  669.593073][T29756] binder: 29754:29756 got transaction with unaligned buffers size, 12
[  669.601638][T29753] binder: 29752:29753 transaction failed 29201/-22, size 0-0 line 3211
[  669.617033][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  669.626803][T29756] binder: 29754:29756 transaction failed 29201/-22, size 0-0 line 3211
[  669.664222][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  669.720990][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  669.907692][T29723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  669.949314][T29723] IPVS: ftp: loaded support on port[0] = 21
19:55:16 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8, 0x2000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x15c, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100000000}]}, @TIPC_NLA_BEARER={0x28, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb080}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf375}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x15c}}, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x10)
listen(r0, 0x0)

19:55:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:16 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em1', 0x20, 0xdfc}, 0x18, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)
r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0xffffffff, 0x10803)
ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000080)=0x5ff57979)
keyctl$update(0xb, r1, &(0x7f0000000000), 0x6b6b6b00000000)

19:55:16 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6c00, 0x0})

19:55:16 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58)
ioctl$RTC_AIE_ON(r0, 0x7001)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0xc, 0x0, 0x10, 0x0, 0x200000000, {{0x1, 0x0, 0xffffff8d}, 0x0, 0x400b, 0x448e370e0511d35e}}, 0x1c}}, 0x0)

19:55:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0)

19:55:16 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r1, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80)
socketpair(0x3, 0x80e, 0x6, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000200)=@hci, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1, &(0x7f0000000300)}, 0x12000)
r3 = getpid()
sendto(r0, &(0x7f0000000100)="d344ecce706ce21a9c7840", 0xb, 0x81, 0x0, 0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000000c0)={0x9})

19:55:16 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7400, 0x0})

[  670.219624][T29773] encrypted_key: key trusted:em1 not found
19:55:16 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x1000000119000})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6c)
write$ppp(0xffffffffffffffff, &(0x7f0000000080)="ac3b365ac484feb4bdaf", 0xa)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:55:16 executing program 2:
syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000))

[  670.360605][T29788] binder: 29787:29788 got transaction with unaligned buffers size, 12
19:55:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  670.419753][T29791] binder: 29787:29791 got transaction with unaligned buffers size, 12
19:55:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{0x0, 0x401}, {}, 0x8, 0x1})
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4)
mlockall(0x1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040))
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="030000000200b483e77f5f99b6b0110fedf25304a15d6ed4afa164aa2a7f339b15b98585c18afcec0320ae6dfe6673c9f8cb755c9df6b861099477f84f627429cddfa079e2c8e77cc2004ff4b84f2f3e26fbca13287ed2e89279e1eb72c6b03b3ab24fece22d5714998f8105aa215ec3f66949c1bb11bef593d4f12c0bd1f7dbce11392028bf0f971456b8e1b0bf7dd55bcdea32502e0c6ffafaa14704194d642e353cf054fcdfb7aa51723f36e2b69f2bf797309d0fe1af04df57f7f2e9855c6e45f66b6d4f72873afe65de7ffd817710f8ce9866aecbf86b958db958be626882d2371a71e50b1cae6a2edc554c93eddc2b25549652"])
dup2(r2, r0)

19:55:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, 0x0)

19:55:16 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200040, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @loopback}, &(0x7f00000000c0)=0xc)
setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000100)='mqueue\x00', 0x7)
mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000540)='./file0/bus\x00', 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000005c0)={0x5, &(0x7f0000000580)=[{0x8, 0x3ff, 0xb78}, {0x8000, 0x0, 0x1, 0x5}, {0x8, 0x5, 0x40, 0x5}, {0x7ff, 0x7fff, 0x2, 0xffff}, {0x3, 0xfffffffffffffffc, 0x100, 0x40}]})
mq_notify(r1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/autofs\x00', 0x4000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xffffffffffffffff)
r2 = geteuid()
syz_mount_image$xfs(&(0x7f0000000140)='xfs\x00', &(0x7f0000000180)='./file0/bus\x00', 0xff, 0x3, &(0x7f0000000400)=[{&(0x7f00000001c0)="a294740bf0ad4d6e7bd08ae384d7722c6e7b81c541c75e9b9541be6e17d0b657136df13c08579a95c7e5ec1cdae60d77a820724708ae4fbb2314cc4f604913c7f7b14d6095a1a77a68640849f92489969df3c78954bdd6a844fbb83e4e8a89afa8d27ffba4d100a4b847bc835c4d8aa892f7456be3d86eabf1e28a56fbc9c89bb843588c85c3113163374c734e88a75ae59424702279673944e3dd6007efd9bb3730f541dac2acfaf2efe20c5b3cef9f36b76b788672b311ddfbee844e5d0d98f57767809b025a838d228815452ac1ed2cfa50a862394522aa65", 0xda, 0x3}, {&(0x7f00000002c0)="3206c430cb64a50e18a50db0011c3228d132f5ac9945767a51f64dc69b3682afc38d56a22e654bd76d15", 0x2a, 0x6dc}, {&(0x7f0000000300)="69f32b5f9a1a8b4a0f5042699952ecbfc94689f7ce50bd84e6560a6af9cc3a142a40650454afef51248ba15d561edf22db9056ff56a60e4fd1c1dbae5621569fae42e9a370f9ededcbc380bee06c8280417425a9c3f79d023a87d443f8cfc1f9f08811ab0a7c85c9bf2a49a9e06ef10443ccd62f6acbef8e087ac8862b3ad284ba6d2bb1ca13286cceadc914bc42714b1fe62016813eece9f0d0e39f445d5dc83b42933180b9fbb72a98a64b91a15426d9db32992c2d29c99e9fb5ba7d204603a0198eef12c81c", 0xc7}], 0x2032402, &(0x7f0000000480)={[{@quota='quota'}, {@sysvgroups='sysvgroups'}], [{@subj_user={'subj_user', 0x3d, '}'}}, {@permit_directio='permit_directio'}, {@euid_gt={'euid>', r2}}, {@obj_role={'obj_role', 0x3d, '/proc/self/net/pfkey\x00'}}, {@obj_type={'obj_type', 0x3d, 'GPL'}}, {@hash='hash'}]})

19:55:16 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7a00, 0x0})

[  670.665618][T29812] binder: 29808:29812 got transaction with unaligned buffers size, 12
19:55:16 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e22, @multicast2}})
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x6, 0x51, 0x0, 0x2, 0x0, 0x70bd26}, 0x10}}, 0x0)

19:55:16 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:16 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x1000000, 0x0})

19:55:17 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3000000000}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6ff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x513e, 0x4, 0x1, 0x400]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048000}, 0x4)
ioctl(r0, 0x8000000000009371, &(0x7f0000000140)="e0e9ffff4ae55f2745cb")

19:55:17 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSETD(r1, 0x5414, &(0x7f0000000000)=0xfffffdff)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x9}, 0x28, 0x1)

19:55:17 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x2000000, 0x0})

19:55:17 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x2, r4})

19:55:17 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup3(r0, r0, 0x80000)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x8040)
r3 = dup3(r0, r0, 0x80000)
ioctl$VIDIOC_QUERYSTD(r3, 0x8008563f, &(0x7f0000000280))
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18001100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, r4, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="9eedf8794d7b628e4d28116276fbfac3"}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x82}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xf4c}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1fda}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2a}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x4)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c)

[  672.111151][T29839] binder_alloc: 29838: binder_alloc_buf size 18448 failed, no address space
19:55:18 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x3000000, 0x0})

[  672.153610][T29839] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xae, 0x4, 0x10000, "9321a40b8430fa9f9cffd8d413703ef9", "43819db213d6520e47e846f393ac607fc8a90a711ee2ec08399ee80a392071414a2be62c2d2f8d9ae1709802c82d7688bc30ba43b71b770916e17c106c2f15d302e6d259574deacf896e4f6b6fa00dae5a7e64acdb1be04a4aca71f3ced3ce628629e7d4cfc34a10464ed57e5806ae2029f68cf718d212cb622d47dd5340b4b7b7ec26b364e32d85ac2fd82ed4b003aff7aba6a47dd90bc713"}, 0xae, 0x1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000000)=[@register_looper={0x630d}, @enter_looper={0x40086303}], 0x0, 0x0, 0x0})

[  672.226511][T29855] binder_alloc: 29838: binder_alloc_buf size 18448 failed, no address space
19:55:18 executing program 2:
r0 = socket$inet(0x15, 0x5, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000000c0)="b2ffd2", 0x3, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="81b0d2554b5299565dd2edba349b69496121258949358cb99b625c", 0x1b, 0xfffffffffffffffb)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='keyring\x00', &(0x7f0000000240)=@chain={'key_or_keyring:', r2, ':chain\x00'})
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x400000, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0xfffffffffffffffd, @rand_addr=0x8}, 0x10)

[  672.271038][T29855] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  672.306313][T29854] binder_transaction: 1 callbacks suppressed
[  672.306327][T29854] binder: 29853:29854 got transaction with unaligned buffers size, 12
19:55:18 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000080)={@bcast, @bcast})
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40)

19:55:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  672.340321][T29859] binder: 29857:29859 BC_FREE_BUFFER u0000000000000000 no match
19:55:18 executing program 2:
getgid()
getegid()
pipe2(&(0x7f0000000300)={<r0=>0xffffffffffffffff}, 0x3ffb)
ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f00000001c0)={0x2d, "a7621f364250386e34236e75b80d27586a9be11f601908041e4ab2dc530cb462b3640cf0667fb302e716c3c4aded9f88a22370c0a7ea790e53ffdd472ab1f0f2ffee064a7538c79eb9d3332b7c8d7b245a8ecca69851cc1d3b7dbe851dfd182373094f1a0015c2a797112dfa7ff5f8a071651e3fc3aca2c9665920e2b502a4fa"})
write$P9_RSETATTR(r0, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
getuid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
r2 = semget(0x3, 0x0, 0x0)
semop(r2, &(0x7f0000000340)=[{0x0, 0x9, 0x1800}, {0x3, 0x800000000000009e, 0x800}, {0x0, 0x3f}, {0x3, 0xfffffffffffff34a, 0x800}, {0x3, 0x2, 0x800}, {0x0, 0x80000001, 0x1000}, {0x3, 0x7f}], 0x2)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x501c02, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffffffffffffffc1, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000280)='./file0\x00', 0x0)

[  672.410912][T29867] binder: 29857:29867 BC_FREE_BUFFER u0000000000000000 no match
19:55:18 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r1, r1, 0x80000)
listen(r0, 0x3)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x80000, 0x0)
ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)="e3503e09f85df3869d8970fbc53d4307eea75d2830fd9afa872e")
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x6f5)
r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000, 0xf6, 0x0, 0x9, 0x17, 0x0, "49218c314c677ee078a542c30be6ce5a59309e7b3718d9272a093655499be89817cd0947bdf6174ed583f2371228781ff2097cae790474aa04fd0d53a07cc521", "125c9046abb47b04e2d49b55acfc843e8ec533db856fe2ac3c057084af17a59360d8b41a06ac7d897163522902c1b27027669e81030253ac23386fef71a4d57b", "7e5b2d8da6d501b66306507338829fe5b60cbc75375d892404276c068efb9ec6", [0x8, 0xfe9]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6e, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

19:55:18 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4000000, 0x0})

19:55:18 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x3)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [], [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$uinput_user_dev(r0, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0x81, 0x36d, 0x43, 0xffffffffffffffee}, 0x11, [0x80, 0xfffffffffffffbff, 0x1000, 0x1, 0x3f, 0x2, 0x2, 0x7, 0x9, 0x1, 0x800, 0x1000, 0xff, 0x80, 0x7, 0x4dad981d, 0x80, 0x20, 0x7, 0x0, 0x5, 0x1, 0x9, 0xfff, 0x5, 0x20, 0x844, 0xf6b, 0x3, 0x1766, 0x5, 0xc9, 0x3dcd, 0x8000, 0x7, 0x100, 0x200, 0x80000001, 0x4, 0x4, 0x956f, 0x9, 0x8, 0x4, 0x56, 0x9, 0x3, 0x8, 0x10, 0x5, 0x0, 0x3ff, 0x10001, 0x0, 0x0, 0x20, 0x3cf, 0x5, 0x81, 0x3, 0x7f, 0xfffffffffffffffe, 0x0, 0x2], [0x1, 0x85, 0x100000001, 0x8, 0x80, 0x8001, 0x9, 0x2, 0x4, 0x8000, 0x8, 0x3a2, 0x1, 0x6, 0x10001, 0x2, 0x1f, 0x3, 0x71de, 0xd03, 0xffff0000, 0x8, 0x100, 0xffffffffffffffb0, 0x9bb, 0x9, 0x3, 0x7, 0x0, 0x6, 0x75cb, 0x74c, 0xfffffffffffffffd, 0x6, 0x7, 0x1, 0x0, 0x400, 0xe24, 0x6, 0x6fa55ad1, 0x3, 0x2, 0xffffffffffffde06, 0x2, 0xffffffff, 0x2a6c, 0x8, 0x2, 0x101, 0x3, 0x9, 0x3ff, 0x8000, 0xfffffffffffffff9, 0xfffffffffffffff8, 0x10001, 0xd69, 0x5, 0xef7, 0x6, 0x9, 0x2, 0x20], [0x3ff, 0xecac, 0x2, 0x7, 0xffffffff, 0x9, 0x8, 0x1, 0x4, 0xf329415, 0xffffffff, 0x8e1, 0x10001, 0x200, 0x6a, 0x6, 0xfff, 0x2, 0xfffffffffffffff8, 0x100000001, 0x800, 0x200, 0x401, 0x3, 0xfffffffffffffeff, 0x4, 0xe9, 0x7, 0x1a69, 0x8, 0xc2, 0x20, 0xfffffffffffffffe, 0x8, 0x7f, 0x7ff, 0x7, 0xf586, 0x200, 0x7, 0x6f1, 0x1c8, 0x3, 0x4, 0x100000000, 0x6, 0x4, 0xe936, 0x1, 0x1, 0x3f, 0x7ff, 0x1, 0x100000000, 0x10000, 0x0, 0xdcb, 0x2, 0x6, 0x3b, 0x81, 0x200, 0x1, 0x20], [0x7ff, 0x3ff, 0x8001, 0x800, 0x1f, 0x1, 0x4, 0x1f, 0x3, 0x8001, 0x6, 0x2, 0x2, 0x0, 0x3, 0x47c, 0x3, 0x8000, 0x4, 0x30, 0xa348, 0x902, 0x6, 0x685f, 0x8, 0x1000, 0x2d64c620, 0x3, 0x4, 0x8d8, 0x3, 0x0, 0xff, 0x6, 0xccc, 0x5, 0x1b4b, 0x100000001, 0x1, 0x7, 0x4, 0x2, 0x1, 0xe87, 0xffff, 0x7, 0x2, 0x100000001, 0xb0, 0x2, 0x9, 0xfffffffffffffffa, 0xfff, 0x8, 0x7, 0x5, 0x8000000000000008, 0x1, 0x3, 0x50c0, 0xca6, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffb]}, 0x45c)

19:55:18 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xc51, 0x309000)
write$P9_RAUTH(r0, &(0x7f00000000c0)={0x14, 0x67, 0x1, {0x22, 0x1, 0x6}}, 0x14)
r1 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x9, 0x4000103000)
ioctl$BLKTRACESETUP(r1, 0x2284, &(0x7f0000000000)={[0x2]})

[  672.586370][T29875] binder_alloc: 29872: binder_alloc_buf size 19472 failed, no address space
[  672.617692][T29875] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  672.674261][T29881] binder: 29880:29881 got transaction with unaligned buffers size, 12
[  672.700580][T29885] binder_alloc: 29872: binder_alloc_buf size 19472 failed, no address space
[  672.743005][T29885] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  672.794656][T29888] binder: 29880:29888 got transaction with unaligned buffers size, 12
19:55:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x2, r4})

19:55:18 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f0000000340)={0x1, {&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}}, 0x68)
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x68)
r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10)
write$vnet(r0, &(0x7f0000000280)={0x1, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x68)

19:55:18 executing program 1:
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0)
r0 = getpgrp(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, <r1=>0xffffffffffffff9c, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff}, 0x30)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xe5b, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, r1, 0x0)
ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x610000, 0x0)
connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x1, @local, 'veth0_to_bond\x00'}}, 0x1e)
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f00001da000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
getgid()
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x0)

19:55:18 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:18 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x5000000, 0x0})

19:55:19 executing program 1:
mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x7fffc)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40})
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0xc020aa04, &(0x7f0000007ffc)={&(0x7f0000005000/0x2000)=nil, 0x2000})
ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080))

19:55:19 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]]}}}]}, 0x48}}, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0xc000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x80080)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000640)=[{&(0x7f0000000240)="416184168b2f4cff5ff95acaa1835766e96ef48ccac40596cabcbc92b7d04c17d2e8d730aacad7678da058889308c4fd8a39caeca07b05d6e65b52543afcab1f7ea2482ce2c4900f5629b213556e0ae309119893cdd5efb5998a7a19c6513ff49c95f40920e4596b4170b353e4c3df482a01c889f6281c781578d58a3750466f747d7f6c059d03bf9d3161786efe3abae5de1c4080df9fb666408242f85a452542aea8", 0xa3, 0x2}, {&(0x7f0000000300)="b789386760b8d6964b4e6af26e449642f85fdbcb97de3dbc1938d2b68da6b511653a4a301333fcde9ba6a0ae4d8d937216daba851e4e08dce6bd79752d016b4e838811b750eee96227f809344d9e768fb57b2527566c969b220c0926010eb7ed8cfa4b544049c619fbc0deb4c2c395188e79986c780df80b8c066b141243e7756cd2e06531176263024600f7d4f1daaa4fdc8f2a7fb68fd97cb3e83efcb6dc436c0854034f4f27cab14e679f49fa10821411fe6d3b78f9263817a84a2460a0b844f28e47cc66a65cca6be41e5fa5ececbb08b53b", 0xd4, 0x8}, {&(0x7f0000000400)="1a637738fb27eb9842639c062f356e37928fcd8327bfa7ca4e5b36c44ec5a8a2891872ba21c214519f40bc4f810f300bbeee701487d77db3895603bad78eceb31698a86d07e66503f9b52242107f13f115e9d1ac1200fb57a54600da56bc7f748b75bf5793f95bf4225d4379b4af7303b0aaa7cb03b9971fc0db01fe31f83afd45d029c0b98f9ae23966438686763140b18aab7ae7f79384", 0x98, 0x4}, {&(0x7f00000004c0)="bbca15761cdfccc0d8271d9905ed978a15ed96b4ed484c4b94471b0d581e6d17dc8d9af968e821586dfa9581c8f8fbd4b7266c8e0d108782ec46a790b0ace13c7db49ea8f46b4db59456d425e6eeb202dcaee0ef1c5c4bfbc2da5e9f4e7e8d7535bc85ec4545754e10793802e1b30a09379df04ad28a5062e74462e23f4e5c1733c7a2e6f6353b1515d53165485ce1927d923fb2fd343a88669094dd51438b2f1464", 0xa2, 0x1}, {&(0x7f0000000580)="93d28105836085f7cf8ead2043921eb649682a9fc27d84b0f4d586020d8a6ffa92602bdff7963c5f1441dbffdad5f2b53947a0f221a72a46bc91e77b838df1fe", 0x40, 0x40}, {&(0x7f00000005c0)="89676cb8186b657918a3ffa0bf49e8cd583fbcdf2141c4971d3274851ccd510958a9e933ba8745f6752576ecaa10ff43ef010371d15d02e43504708017764c292c10881e64477fc3672c1cea0504fab934237c9a0bd2d72d8f6daaac6cbff1407734c082e4e5210d63cc30", 0x6b, 0x100000000}], 0x2010010, &(0x7f0000000700)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@codepage={'codepage', 0x3d, '737'}}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x2)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x10003, 0x6})
r3 = getpid()
r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/dev_mcast\x00')
dup3(r4, r0, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1)

[  673.149662][T29898] binder_alloc: 29897: binder_alloc_buf size 24592 failed, no address space
[  673.179868][T29898] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  673.192205][T29903] binder: 29899:29903 got transaction with unaligned buffers size, 12
[  673.243596][T29905] binder_alloc: 29897: binder_alloc_buf size 24592 failed, no address space
[  673.291825][T29905] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
19:55:19 executing program 1:
r0 = socket$inet(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0x6, 0x4)
sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="240000004e0007021dfffd946fa28300200a0a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0)

19:55:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x2, &(0x7f0000000080)="0adc1f123c123fdc4941c3")
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x1, 0x1, {0x2, 0x3, 0x9, 0x3, 0xff}})
syz_mount_image$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000500)=[{0x0, 0x0, 0xfff}, {0x0}, {0x0}], 0x1000, 0x0)
r2 = getpgrp(0x0)
ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201)
r3 = getpgid(r2)
sched_getparam(r3, &(0x7f0000000040))

19:55:19 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6000000, 0x0})

19:55:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:19 executing program 1:
mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0)
r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x3, 0x1)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
accept4(r1, &(0x7f0000000100)=@llc, &(0x7f0000000080)=0x80, 0x80800)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f00000000c0)={0x0, r0})
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000e00)={@dev, @local, <r2=>0x0}, &(0x7f0000000e40)=0xc)
bind$packet(r1, &(0x7f0000000800)={0x11, 0x2, r2, 0x1, 0x4, 0x6, @remote}, 0xfec7)
syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./bus\x00', 0x6, 0x6, &(0x7f0000000700)=[{&(0x7f0000000240)="cf0699066c5fd0437164d2d8aaa5b5aeafda2021d97b59988819a55cf9cd7708d2242bafe0a40d45f69732812256c6e856b1f00d4db202dfd3940e0358b9954dcf3e5ae6b0e94a9e196a902c7ed01f578653e598df2669133b5b2680b1e9721bbf59d570ec08aacf4affd5cf57edd77781e62ad0", 0x74, 0x7}, {&(0x7f00000002c0)="62a663eaaf8b5cafd7859de45eb9eacc9da21935cd0e6798913603b418d6de8202312180f009c13eb6ef57a992420134351b1f092146cc52e8971aee6f9fae54e089c9a080e63fd7be8bd3d1b1e72f2e4da35a9d97654b9f0b0a493186430cf7a80a3a6ac6e7ea382c2959045e856ec4798bc6d4f5cf5b7bd7440bc8464e99a6051fca7bcd996387539eee3fa8ea3792542a253116cda4c037948202320fc091374f3b0e8a876601d616", 0xaa, 0x6}, {&(0x7f0000000380)="5e52c600ad79aca32cd81da26e7f927dd25301c52fe8bcfa0a482f81a76fbe39810fcf6e9358e55abfc15f6dca43ca57052218914599bfa85fdd6d4d85c03b5f7269c3ff2018cda2465f9426db5682d6974f598cad62fa3b01a704839e25f638c31ea36ef664c0a2bcd8f972a94e387bf5ce84baf219d14c5ad189f1fe5560a3955105ebc16365048d9504176b8d2c8d87c68bcbc8ed136b715b14ed105d4aa3f8bc8fc1a8a620e2295c39df1c4d8bfd14cc9c87651fb7002481fdebb0f060c8eeaaa384f6f0cd87b274f32f6041b9aa59329383f7cdcf5280900e204eb70837748ab9f5830bc7b5cfd785dfeba5", 0xee, 0x7fffffff}, {&(0x7f0000000480)="47dd0995d6fdb286134ce76be589b156b21b2c59bfbbdd1600421dbe75dc88a1db02359a6095b4bc42baf681fd04709969d8b3a81b23d21dec521c849f752d5f51ba9004d1d29c1b74fcbad1c76c65bb9923b876f5662a1d352ce97296234cc7ad4754a58abd0ed7a52c5e38af3d9e6f47ed0486d818ad284ef1586b73ac504b718b067612dc3a7bb64b15250b0ed8b1b172c3e4c54c24d6128d086dc44596d4510d", 0xa2, 0x6}, {&(0x7f0000000540)="7a5f3d0db2f3bd4d16337706febac0f107e26b1b1e577da6800dbbf2c9e8eb2d174a99aaeffdb0ed04d999d3ca32f291e96f9aad4635a6bddf5b0736309576d5c96254d94f49b6666c6effaecea3979200140aa0355ac95388a1896d0f1af2b6ef43f70636bdadad910e90d9e3f45b904eb6ad52cfc1de800c1f8adf2d8056a1c71612", 0x83, 0x10000}, {&(0x7f0000000600)="fa3bbadb0c35c41a618cc43857185b9353b6274812843351433565f4d4bcc2149164d36baf0b45582e6d3cd236630ea28cee197b88f2ea1f0fd0f0f38664f7130a508baaf82e236898f9987a901c852e48d6e7aa5dc1c7ffcc91ab0a32ea744055a69180d963a76ba5ce81118edf116a858883497b51078edc13391bb0a15d40a59a17f4d3d3ebeb70ac2ebff41bb7152cf5f2830fab506280dff9397e7a7f64410264e1fb9b058cc3c0490abe8eca98292ad688e3ee5a5c11ab3a3352e37372c45d22fe9b542e1dc763b427c2815c0f0b19478f4e90d6b346563df2afc280a5bb9a1707838bcb5d", 0xe8, 0x9}], 0x0, 0x0)

[  673.582426][T29927] binder_alloc: 29922: binder_alloc_buf size 26640 failed, no address space
[  673.606708][T29927] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={0xffffffffffffffff, 0x0, 0x2, r4})

19:55:19 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7000000, 0x0})

19:55:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x46, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0xffffffbf}}, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x41100}, 0x48)

[  673.663037][T29936] binder_alloc: 29922: binder_alloc_buf size 26640 failed, no address space
[  673.697034][T29936] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:19 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  673.762376][T29938] binder_alloc: 29922: binder_alloc_buf failed to map pages in userspace, no vma
19:55:19 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000140)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x502, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000880)

19:55:19 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0xa000000, 0x0})

[  673.895412][T29948] binder_alloc: 29947: binder_alloc_buf size 27664 failed, no address space
[  673.922918][T29948] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  674.039427][T29953] binder: 29952:29953 got transaction with unaligned buffers size, 12
[  674.051593][T29948] binder_transaction: 34 callbacks suppressed
[  674.051614][T29948] binder: 29947:29948 transaction failed 29201/-28, size 27648-0 line 3148
[  674.089534][T29953] binder: 29952:29953 transaction failed 29201/-22, size 0-0 line 3211
[  674.129299][T26823] binder_release_work: 34 callbacks suppressed
19:55:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f319bd070")
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x18, 0x2, [@tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}]]}}}]}, 0x48}}, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0xc000, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x1, 0x80080)
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000640)=[{&(0x7f0000000240)="416184168b2f4cff5ff95acaa1835766e96ef48ccac40596cabcbc92b7d04c17d2e8d730aacad7678da058889308c4fd8a39caeca07b05d6e65b52543afcab1f7ea2482ce2c4900f5629b213556e0ae309119893cdd5efb5998a7a19c6513ff49c95f40920e4596b4170b353e4c3df482a01c889f6281c781578d58a3750466f747d7f6c059d03bf9d3161786efe3abae5de1c4080df9fb666408242f85a452542aea8", 0xa3, 0x2}, {&(0x7f0000000300)="b789386760b8d6964b4e6af26e449642f85fdbcb97de3dbc1938d2b68da6b511653a4a301333fcde9ba6a0ae4d8d937216daba851e4e08dce6bd79752d016b4e838811b750eee96227f809344d9e768fb57b2527566c969b220c0926010eb7ed8cfa4b544049c619fbc0deb4c2c395188e79986c780df80b8c066b141243e7756cd2e06531176263024600f7d4f1daaa4fdc8f2a7fb68fd97cb3e83efcb6dc436c0854034f4f27cab14e679f49fa10821411fe6d3b78f9263817a84a2460a0b844f28e47cc66a65cca6be41e5fa5ececbb08b53b", 0xd4, 0x8}, {&(0x7f0000000400)="1a637738fb27eb9842639c062f356e37928fcd8327bfa7ca4e5b36c44ec5a8a2891872ba21c214519f40bc4f810f300bbeee701487d77db3895603bad78eceb31698a86d07e66503f9b52242107f13f115e9d1ac1200fb57a54600da56bc7f748b75bf5793f95bf4225d4379b4af7303b0aaa7cb03b9971fc0db01fe31f83afd45d029c0b98f9ae23966438686763140b18aab7ae7f79384", 0x98, 0x4}, {&(0x7f00000004c0)="bbca15761cdfccc0d8271d9905ed978a15ed96b4ed484c4b94471b0d581e6d17dc8d9af968e821586dfa9581c8f8fbd4b7266c8e0d108782ec46a790b0ace13c7db49ea8f46b4db59456d425e6eeb202dcaee0ef1c5c4bfbc2da5e9f4e7e8d7535bc85ec4545754e10793802e1b30a09379df04ad28a5062e74462e23f4e5c1733c7a2e6f6353b1515d53165485ce1927d923fb2fd343a88669094dd51438b2f1464", 0xa2, 0x1}, {&(0x7f0000000580)="93d28105836085f7cf8ead2043921eb649682a9fc27d84b0f4d586020d8a6ffa92602bdff7963c5f1441dbffdad5f2b53947a0f221a72a46bc91e77b838df1fe", 0x40, 0x40}, {&(0x7f00000005c0)="89676cb8186b657918a3ffa0bf49e8cd583fbcdf2141c4971d3274851ccd510958a9e933ba8745f6752576ecaa10ff43ef010371d15d02e43504708017764c292c10881e64477fc3672c1cea0504fab934237c9a0bd2d72d8f6daaac6cbff1407734c082e4e5210d63cc30", 0x6b, 0x100000000}], 0x2010010, &(0x7f0000000700)={[{@nodots='nodots'}, {@nodots='nodots'}, {@nodots='nodots'}, {@fat=@codepage={'codepage', 0x3d, '737'}}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0x2)
ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000040)={0x10003, 0x6})
r3 = getpid()
r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/dev_mcast\x00')
dup3(r4, r0, 0x0)
readv(r0, &(0x7f0000000200)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1)

19:55:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
r2 = getpgrp(0xffffffffffffffff)
ptrace$peekuser(0x3, r2, 0x8)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0)
ioctl$TIOCNXCL(r3, 0x540d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x532, 0x8, 0x0, 0x7df0fb7cd9e9230b)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x7}}, 0x18)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={<r5=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x800, 0x3c, 0x8, 0x7, 0x0, 0x9, 0x3, 0xfffffffffffffffb, r5}, &(0x7f0000000140)=0x20)

[  674.129306][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  674.164228][T29961] binder: 29952:29961 got transaction with unaligned buffers size, 12
[  674.174002][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  674.182221][T29948] binder: BINDER_SET_CONTEXT_MGR already set
[  674.236256][T29961] binder: 29952:29961 transaction failed 29201/-22, size 0-0 line 3211
[  674.237960][T29948] binder: 29947:29948 ioctl 40046207 0 returned -16
[  674.245117][T29963] binder_alloc: 29947: binder_alloc_buf size 27664 failed, no address space
[  674.291765][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  674.355682][T29963] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:20 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0x1f, 0x4, 0x9})
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
r1 = socket(0x11, 0x4000000000080002, 0x0)
fcntl$setpipe(r1, 0x407, 0x1)
sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000040)=@l2={0x1f, 0x8}, 0x80, 0x0}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, 0x0}}], 0x118, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x80002, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3)

19:55:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x0, r4})

19:55:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2b, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000030000000000000c9"], 0x0, 0x0, 0x0})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0xfffffffffffffd6f)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x300, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
memfd_create(0x0, 0x0)

19:55:20 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x10000000, 0x0})

19:55:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  674.406698][T29963] binder: 29947:29963 transaction failed 29201/-28, size 27648-0 line 3148
[  674.426509][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  674.489954][T29975] binder: 29974:29975 transaction failed 29189/-22, size 0-0 line 2995
19:55:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x105, 0x0, 0x0, {{}, 0x0, 0x400b, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0xffffffffffffff00, @dev={0xfe, 0x80, [], 0x19}, 0x7fff}], 0x2c)

[  674.561289][T29982] binder: 29978:29982 transaction failed 29201/-28, size 29696-0 line 3148
[  674.568363][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  674.596505][T29982] binder: BINDER_SET_CONTEXT_MGR already set
19:55:20 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x48000000, 0x0})

19:55:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8524, 0x200)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, 0x0)

[  674.661601][T29982] binder: 29978:29982 ioctl 40046207 0 returned -16
[  674.661656][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:20 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x80200)
ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0))
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80802)
ioctl$KVM_CREATE_VCPU(r2, 0x8010550e, 0x0)
close(r2)

19:55:20 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  674.857259][T29998] binder: 29997:29998 transaction failed 29189/-22, size 0-0 line 2995
[  674.894537][T30006] binder: 30003:30006 transaction failed 29201/-28, size 31232-0 line 3148
[  674.920401][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  674.931161][T30010] binder: 29997:30010 got transaction with unaligned buffers size, 12
[  674.936159][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  674.964208][T30011] binder_alloc: 30003: binder_alloc_buf, no vma
[  674.984135][T30011] binder: 30003:30011 transaction failed 29189/-3, size 31232-0 line 3148
[  674.988169][T30010] binder: 29997:30010 transaction failed 29201/-22, size 0-0 line 3211
[  675.008519][ T7994] binder: undelivered TRANSACTION_ERROR: 29189
[  675.017662][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
19:55:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x2}}], 0x1, 0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x8)

19:55:20 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x4009})
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x17)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffffff7e)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x4800)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xbe, "c269a9f431fcff1fc8b29e9d4c4e869387bd71f3aba26ae3c68306e0a81873c370ba2cfc11531ebe7a3d3eb15dac488b50057158a37b5df07ba69bc3ba3475ac700315e54554650e69bff4724db2815a0820dae1120994a12b9519bfcff7248a3e6fc4dc6eb306a17ee5716a0f6eed60b03ea48e1c8a2badd60948b525962a5c87653fea211cbc40f430ab205781fdd2940320074f7bdc04389daf0e2e72b39de29641ffccad6aa785bcfd9758b66f8e1f89fe0e43ca8f1825bb58947e99"})

19:55:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000080)={"b484a907332264eba41e2391fe30285d43e3ff58449fe1fc80d913f473edb2400bf0a29b44234dec41d30fcc5a310b0506047664819795ce5d5440912bc118daacd2c2f67b90b8eb7d1291d08021419e1dad55ccfdfccae59e5050758d2755f2cfb21ea92a72a04594a55d01156896737ba401b446ca4375ca2c0e286efbd1a01ba8f2e01bde1f1ca133799560770c283c81c05bca855ef6ea6ae3f0c731772ff574f5c92eabd0b29ae3e97987d4b173c0fc4f3117a617eed4e48cf577c8f8e3ea7e5364ebd692aade865c85623b90c2272e2f5e605be587bca7fa3f9e6c55fb210561beca05d20dd7f2ab4476343c6bfa702f7a8840c0fbdb9049c8c11847dcf087cca39e521cee36c5e15049105ce2ea01b2d66eb95ec7b1ab4ae1d7fdff0c11eb8906d8eb6a24506f38c63a362ae9aa360eb140c2c1c334770c106a41bab603718106ba9cf28013690399c02bdbe5c0bb1436f238aadf400cb6e6085c6b8261abcc3014af5a17c6465bbe47568d03d16010739cbd82d5d928e7b5e4f0656495958bb1b2fd5a8e6e9e61b9f27324b12bfffc0b781451b5fff8af252cf997ac2a6702f704786efd340467c39a0585266bca0311be77bb3782d6c5768a8b6da9386fd195c575cbb19c249f6dc06b6617646647088046c556fc0d47528f8824655f4a89c44bb370d427b544ae5ba0d4231ae97ea9872d2c7d74b293c9ea2d7e015da263d06b0a0e178d3341a42fbd676d143ae0dfe980bd1210f7b85083782a11f96c7b27e2297f4fe22ea09c5482dffb7572c2083b2c4339169b093e1efed273e8280a54eb0ecdcb996c0b997c202e3745e0866edba83bbb7f299ccc5359f6906a69c3485957234efe639eb41630baae66610310cff5abdaf1da3aceacf99698f373fc5597eaa9c4a9e8f541e7eff66b690bf90d4947ccb7e2af2f8c7a0b4ed184edf5779b3000cec791c92f466d97b4597f3300f3ce5d0d4d847af4eaf0f755d98a742e835fbd4fdddfd7dbde21fee84e3a23175f09ea96ddab4d0d69910c82bf574762e69f63678a75a2a8c99bb160e720a65349aaaa5b3e0ba60cdfd3cfc9970fb2ac5458e0c7615e2b1a9e9ba13efdadd47a7783f9e2fb1a29b86c27a051eb679fccb57b2b9b996c7c1b8c133a513f28cbdc82c7b03cf7dc6d3e08a97d0001d7308c0d0e391b2cc2e080725a6acce317a39394ab09a95be235cdb2c4fd1fbf118325c1f8967280607ae6dcaf3ce1921d403201b71ed5fa484576b1163ccb9aef67dbfc3a1afc4929a07505d6e341ce02243d1859adde3bb5f95f83a2a6f9ddea12b4a93bc8e021e549f0b856f00f8d9824e8b0461040db7d77d28cb1f0f95f26af48af4de62454a843c14b77f3c8b5eafe10eb06359678c595bccc4485937ed9ebd515b99759343e6440818e433782bc62c07738546260399acfa16148dc"})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000006c0))

19:55:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x0, r4})

19:55:21 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4c000000, 0x0})

19:55:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4)
pwritev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="fe26ad672cd2350feaa92f5349e0f6e3cddbb99d7aedfd4c0e7e626142", 0x1d}, {&(0x7f0000000100)="3b7b687268bdb49ea09a2e472b51e9b9401c1189fd53d45140a2c0b7ab523a392be6cd077aa7c230e958fb4197316adfe69329add4bf529aa49299b392c086", 0x3f}, {&(0x7f0000000140)="d86d4b511f7c9e80df3210956f0d059352ca1688bc093548cf10054e2ccda7faf4a4a7e09ff198b51c72bd4cf6f4eefc904c7d2e5dd3e4626ee9d8695196d745515d1610ea3270b13df37dad96c5a2b9a753d4580ccaf6fefabadbe233702ed56366374cbe352e71dc66f612fd9809df96ea88fd8d1048ad3aed09c293b5640fc4655e2097bd4bb1d78b44430e7ba979e5", 0x91}], 0x3, 0x5d)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]})

19:55:21 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite\x00')
mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4)
connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x1, 0x1, 0x7, 0x8, 0x4, "e66f59d530b41740c258aec1b555bd56c8257aa4a039c67886fbfdc2ef2792f6f696220151b2e8342ca66e5200407b5583338a25183379c514f66f531e1b64", 0x1b}, 0x60)
splice(r1, 0x0, r2, 0x0, 0x7ff, 0x0)

19:55:21 executing program 3:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xa89c1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x1}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x100000000, 0x82f, 0x800f, 0x3, 0x8, 0x9, 0x8, 0x3f, r1}, 0x20)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={<r2=>r1, @in={{0x2, 0x4e23, @rand_addr=0xff}}, 0x5, 0x800}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = getpgrp(0xffffffffffffffff)
fcntl$lock(r0, 0x24, &(0x7f00000002c0)={0x1, 0x3, 0x101, 0x3, r3})
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000300)={0x10000, 0x2, 0x80000001, @local, 'bond_slave_0\x00'})
syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x121000)
rmdir(&(0x7f0000000380)='./file0\x00')
close(r0)
getpeername$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000400)=0x1c)
r4 = socket$inet6(0xa, 0x1, 0x8)
fcntl$getownex(r4, 0x10, &(0x7f0000000440))
fsync(r0)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={r2, 0x8, 0x7, [0x1, 0x0, 0xffffffffffffff8d, 0x7, 0x1, 0x9, 0x4ed]}, &(0x7f00000004c0)=0x16)
ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000500)=0x8001, 0x4)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000540), &(0x7f0000000580)=0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000005c0)={0xff, 0x204, 0x333, 0x400, r1}, 0x10)
ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={r2, 0xa79c}, &(0x7f0000000640)=0x8)
setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000680)={0x6, 0x1, 0x7, 0x9bd}, 0xc)
mincore(&(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000006c0)=""/121)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000740)=0x2)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000780)={0x4, 0xd48, 0xffff, 0x100}, 0x10)
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/btrfs-control\x00', 0x4c200, 0x0)
write$P9_RREADLINK(r5, &(0x7f0000000800)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
syncfs(r0)
fcntl$setflags(r5, 0x2, 0x1)

19:55:21 executing program 1:
shmget(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2)

19:55:21 executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0xd, 0x0, &(0x7f0000000200))
exit_group(0x5)

19:55:21 executing program 3:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
finit_module(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)

19:55:21 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x68000000, 0x0})

19:55:21 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:21 executing program 1:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000280)='./file1/file0\x00', 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x0)
setxattr(0x0, &(0x7f0000000080)=@random={'btrfs.', ')@em0%$ppp1user($wlan1\x00'}, 0x0, 0x0, 0x0)
sched_setscheduler(r2, 0x5, &(0x7f0000000040))
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1\x00|'])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
getresuid(0x0, &(0x7f0000000740), 0x0)
r3 = getegid()
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, <r4=>0x0}, 0x0)
stat(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
sendmsg$unix(r0, &(0x7f0000000cc0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000d80)=[@rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, 0x0, r3}, @cred={0x20, 0x1, 0x2, r2, r4}, @cred={0x20, 0x1, 0x2, r2, 0x0, r5}, @cred={0x20, 0x1, 0x2, r2}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r0]}, @cred={0x20, 0x1, 0x2, r2}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x158}, 0x80)

19:55:22 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x0, r4})

19:55:22 executing program 2:
lstat(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x77ffffc, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="a100000f20e06635000010000f22e0baf80c66b86e03898e66efbafc0cec66b9800000c00f326635000100000f30260f01d126660f1264000f076800f0260f38083d9d", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:55:22 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6c000000, 0x0})

19:55:22 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x3, 0x0, [0x0, 0x0, 0x0]})
memfd_create(0x0, 0x4)
prctl$PR_SVE_SET_VL(0x32, 0xfffffffffffffffe)

19:55:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:22 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x100, 0xa6)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xffdbc2ca)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0xc469, 0x8, 0xc63, 0x3, 0xb, 0x7ff, 0x4, 0x8, 0x7f, 0x100000001, 0x64, 0x8001})
unlink(&(0x7f0000000000)='./file0\x00')
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='pipefs\x00', 0x0, 0x0)
setsockopt$rose(r2, 0x104, 0x5, &(0x7f00000001c0)=0x80000001, 0x4)
creat(&(0x7f0000000140)='./file0\x00', 0x0)

19:55:22 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x74000000, 0x0})

19:55:22 executing program 2:
r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000840)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time={0x77359400}})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0x80045300, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000))
r1 = gettid()
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000003c0)={0x200, 0x8, 0x7f})
timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
clock_gettime(0x0, &(0x7f0000000200)={<r2=>0x0, <r3=>0x0})
timer_settime(0x0, 0x5, &(0x7f0000000380)={{}, {r2, r3+10000000}}, 0x0)
tkill(r1, 0x1000000000015)

[  676.456470][T30074] binder: BINDER_SET_CONTEXT_MGR already set
[  676.491940][T30074] binder: 30067:30074 ioctl 40046207 0 returned -16
19:55:22 executing program 3:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fffffff, 0x200)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x84)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
r3 = socket$kcm(0x29, 0x809, 0x0)
sendfile(r3, r2, 0x0, 0x7)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101000, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f00000002c0)="2b38edca3099f199c0b1578202970ebadd87bddce0633d5fac2a3c82e974b6f250573d6647732e89f0c5695e795410698db83f71393f13efbf4ee2ef4e3cf83d95f133a08875672dcb5012f19d311c97573f40c7a0b8da105d5dccf9ff3cf3848ed9ff8a82f680384ba9159656c7410b0e22fd5a134b77e3f7453955dd90a74cd7ea5435c5ddcdb53e711b85dffae0858e50eebfb0859730cc6efe18586400928dd636dc6610b45d7b891b6b0b638a69af42c86fdd32440e4016169488242a3e40af0f5a828b7bd96fe1022b6baa1ec88e21e541d8f60516960e0e5d994effedee38e780f1b30a61c84984d3d7667173b716bfdf373e422dfa243aaaa9d2fbce1d58352ab0a3143d9e7371a471cb84890924a494b302b395ada60693939cf01018f67184c7ec213c3d1e032ac56005c97cbe40421988cfcf7c6899447758f93e4b9b252b2c8ecf92194063e32acc0d903af37b4e877bcbdfd450f4a23e23c1951011c323fdff616a67464db09e3f4eeeca50183244da4ef139eaae925cf4eb20f46f115649bbbf7d777113c374304c35268a16e4a5ab9f601692c69eba1bd9cee6d8b1d204b13e7aca376bf3ab8698755a981bd135c65ecefb2124019d3035fa27745a7e1be3ab1c411848e58ce65c9dac41570cb6bdc0892a15762dac2913f6824fe0f2d1eccf49abcd2939478a80d939c125cf6f5acbb9e27a23dea36d4fab72812410c5d83ce242dbd5bae055fdd9f7d637e5cc78d1a198d863eb6b3cfca6daf33d25b66dfc761a8198ff811fd0e7da6226eb3f4fd1d178a659bbf4d570805d87e5e4825977f92ffbac1b10ed000db216b930baab7b3caeca2603fd975c38c928beabe878158b912cd2f7394ddd9e1dcdeda3863a5e0d94a4c9372454329e4508b760a572643eb7a34927e66d5d78d834e04b955dab7ecc5a6061006d6ee2265a2a9f590dd96bb0298363d0d7b3300d26a0518adec19cd797306a2f9f0a264f59229dc7b5fea97711b87ac8de3c431c24cf6dc992c7a3627b6e26753432348700771dea8473fefa469a55278cafa247710e9078681d9cb8a9e6819e481c0db06f9e8be024b84642fee62e412dd7ffed3bf0014309e77df859705ddf0b933e890731b971485141839b04ce968a048bc7bf34161bbc84928429de324d800cbf1fc1e3189e4ab1991afc7a3021654928961c671c23c486711e6aa556ed0cbc1e66e7416ad3cfe919af206e98ce8221655d6ebc72ae9b0ec23297c066932a5df6958f52b590a8779c2c98ce8e972a1eaf5d864bd1e87442e0a750e8c180e0aba914fd600dd964efc4bf303e8b2e0dfea8d5a2a9b21a25ecaebba5cbc186916dc342d14a9e50eb4829e22547ceaa7e8dd577678c667816a7379426a3156eb3fe31b32d7b192988103e14753fe256c26959bf9ee41dc889e48991c0e45571005b957bf8431242b6e3e8d3239d920736be77a5cb41d3513ef2b46866ff835f7728fe7447b90ce4ee252895403efd433ca93f80e113e77731d17c56f9c8b0f7aa8087daa7b20503eb062f60ae6326bcce59458044915373690393143dda1d9e7111bca9ba2d2cf460a7c94df32586abebe6b4f59dcd0ee2a57181f2120bdad5ca28fb599b9373dfaa112944ca96418564113858bc7a92046179ef438554c36407aa7b36426acd2a5f6e71dc536bf8ae81ed5ec0ce2e1ab955a19e8ee6333c238b46c7d1944d912a2fb17eda8d9c040f64308a902f75d1d9aff9ddceab5c6c23dd1cd2dd2ec831d9dd545edbdd4d8a82cc2cd76694781076d407dc9975d73f4fc4a490b3e93d3d2aa2f595b31424b52c243169bc1c4acef00452ba7f048ecc31125c0dd1c76909884fe86ac520e1c8629cbb452343b5829eac9188a40367b4317671313ff7fefd6ceb30ccc2f14fef3da74cc8f8e8382a6e2088bed9472f016ed8db09b51ed071772bb04691fa6c1c4a7570fef79abc7035dcdd9f22bd5004923f2a6fbb26573e5633e6f41df6e1a264d955efbb8db1ae2f633c965222fce4c1912331fa3cd519dcb5fa94ebbdb57629ad2f41989d5e8e92b1d18cdc81a959046ba05345013802eaa36f50bffd7f01be45f1a4358d06fc2d39f2e3159af3302f6c5ac519e3e50579504c25769c3af496428c7a5828ffb1a51bbdfbaec39ece6a2e7541d5c6a252756699c70dd801064d4e6d7a325d9b58621750b03a7ed6ab4699e8733a06ba9aba392e35dfc7d3394abee7d3745d2ee21f2f877c906935507c61cd6e729e5ddf0baeeba6fde3e6bd769bcf30cf2415c6875175c18da746c0f0983cc7c13cfa7ae151085ce276d937382c5080d5f6f121af6ae018ad917ecc947274e546b1a6a15f5b0573e061bb94403b7eaa50cf0ecf6f27b03dede5a7d84ce5602f966e93b59a36939d45b549b8b21bd7a3758b8f4882e0490ed2c6da54e83a69d9fbc5ca53ef397a1f7f01085544ea1f95f1120f1aa75b256263cbd754cce6404a3fc801e6a63e6237adacdc799540a5b3819475ea66f33f8fabcb609efb40bec3bcc3f62a10148d994f19bc4d4f588d351003e15ba8160528ad4014249193153e0f80eec68714952a3ed782e510772479a3b0d7934ab417fce13c33f7166790c4023d8e07bf738d635adef3b81ca8383303ebafd3b4128b841bd52236821b2c831a0d613f697ce628d6b15c72e52201f9e30b0aeb7e340c886070420a49953921483e00797197d5a5398e59e1684fb79728fc34454df1e3a9774816ec0ab16dbea24fcd7abba0f4722e3cd5e58099ad5918cf9801d522f46ce475b7b8918d258cc245fc07743326db093fe325ca59396174b836002fccd99ddcd0059b946f5adabb4951654e8d4f4258446d3b2e22d5fcd7f177314ae3d5b559aa909e0ab8719ff057ad51a061872b4c6041894b2b8156611b5289dbe2a06a1bf972c0b8efacd2364805cbff1867c4252d42d26a82384acc157c1bff7af7abc53208b1526b3c3e5c89b551e496da8d991b30c939a3e2e9ed02ee34237c6f3b26f9ac5ee791ea0dfaa53e24394dd9985c1cdb7084ef955ee1b665c457b92d21a6ac5da30ccd963c009ea6c425ac6aeb4f34aa8dc83169ae7e77211fa9f814660f6fdfd54336be2a3685db3ff33897e18c5d058d88dae23ce2b71554cb3061811974fdc67dbd606e9512497a52de7ed6e2bdacf0e4e10efa83b367ab72544bd46c880b77973e3e80131a59955c3440baff986446d61319abaac918c18dfecb3d27001dba208f526c6a6ba61167de801b6ba36343b9e25ce72a809f3032e96f5af227b52ac4b5057d1b2b6f41c25501206b234eb7abd7859de54663ac26247acb8ffc820fb9aacc7712cdfc225a62b1a557a1ab9df2f71fbed2d1731b4423258559f9b92c0af7669eade32cff48b116be55e346fcb774c6fb11db01e73b3e7687d871416c04992da5dfcf7cedd8ede36cf829916d1a30473aecd732f1793ca94b27822cc0f559f56ceb0d7fe093375c6e440328fb7e7c69c116e5598f517ebdb2b6af9487a8b45efc4a44f77fd1b259373376e7e3e87fb6447a9ffdc8af5e67df4725c8f6851e035739832dd84347fa8563c56974c74fd6667d475fa78640deb70215856ff843d1bbfa7744d3618271f97afde59e53cee86a3b036c7c345b4a6590225bf4d1de6e1e2d2787136359c47899d64c7f83fe167935512b9f0e9cf3def071bfe22605b240e736abb23a7567d30ffd38b1318fa7a46889fe460630170b4fe840b65563960f158023137ccc4f72e69a8304578c4ec7ba006c07e1e91b31b8c8a3feec6347fd4416a600ffa2039bb51b44abef3ce4faba5beb7c67d098a89e00dbe4d9576fa3c3a229168753ca4266584c6664d743e36eda42a25d02738368f161108d698a6366550a93dd2a171acf911f18763e133fb2af094e38ffd300e49019f3b17fbcb6e321642274194ab614f1b39127efcd82ce5aa2d7d157ae09f4429aacaa857a0cec598653e01d216a1508a20d49da80b47310cc1004c3038b6d77c3635bb43d7d7c857dbf5bb3322d233d1340d6e0d9f2d294d3fa68af2d3101a54ee3bec17e29948fe787d44e57f27655b895f540b15c0afff739b105b38fd32db7584083fc110f0f9b6524864b82aeb22bf998b24bc18fb5b156fdec2642999bc547ba5d096af329412f5de3098755067f4fd671012d43a7c3cc25796d9298372afd56bcb3f7c7b77e46de1875ef4a4a9dcedbf816427536be6d3aadd8233c1f84575dca76f1c69ad98b5473c1c866aeee198454649b3e683c45d253b2f08b11fe24b2a4e3f20f2f9de13c1b6bcb2a76fe3424f8b9a98e1512dd5f1d64723940b2a9eb1d5bb98f4d3b360e2dc6f30d1d3d1928144691f145e9d7d29dd0d81aa9904ac2a7d6cbf96a8f9dc25dfb3701545bace311f9b71d7a4d2d1ec2937a53eb33995fd9371276006d1642633590f66a1a15339428fc70f3366dc7b2065a08fbc4b0d9c7fbabd34fd359bc22fe2d8cb9cc0a2629ed38157c8cd0c16fecdca50aa7fcd807d178e917c915afc165c018e51b4845d0d63fbb1fc850cc51c2f9f914e9a65488b2e863ef5afd428d4c7d8fd0e85c8dfd601c81c6fd8477f524c4d88a01f33272072cc3994a3b3a891fbfbebf24dbe3ac9230f133a2ba7470a5799009adda7ccc51a8b1e5693ce8d5ef670bcfbcee60969e9e4efbab04b1d4c40acc055ad88c939b7c4bb72b99312960caca86a716812f00c993d2f0993881b12ee46e2dca82b278ade6fcd8c602e9b7a06a39c20789d5e7897b02b9c79d965ddfc81b480c2b9fc8dcd9829dc2466979a86c077d5b882c5b066d19d83f6ef06d29d39117c59aaea01555f747168be91c1c63aa090e8a5a7b6ebb9f60d71cbfad6ca5501c27be64a76abd933be784f49d0f19b84b7ddcb1faa30dbc1131c5dcf2666666c9d909c4fa6acfa3a79c9f2443384eb1aadee605e4bde85b290b03f51c20ab462929df890f702c1c2c220bc378d277038499a57d3497e174ef472761ccb85a8307de39ed16855a3363009e7ef8fa801058834b7ef9955074b18fb55568889f36cd13aa148e6655cd418a1d27c40f556ad436d0a3d611b3092565470a4c9cea4fde04e1f720c7646c5d450dfa4a17ddd388b11fe64eb7152341aa1ab5d942b1685d75ab6cc8f6b818e4f5e309628755c7506d04e44856f2eb60fce0aadcb3e91eb06879e3e6eb53a84fe66d35e37a4611aa3fd9e03f925a3ecf19b45bc136c5f3f5cbb6612675d94b3d233517f6afc100fc0038b71bc4e40bc05aaa176ef0fa4d51aa5714c470a47bd35395fa6de9d1817cfd6d32c06b5e06106f4ea67e4b34136184a5e2b1b80cbbb4e52d0222a9d977515052cdc125edb8eded92f79f1ddd1f005da176f61eaeab8a9e098d21e59e76cb4caf0f2dd2a4228330516078f10f69b6ad0bfd665d84aa72f31c02d3f85887925a110b300f2d5352b98041ec9c9a565e06a8d8cf99aafd445fef66c90a5b0e2ac1b1732811fb0727d1b5b274db208aad047e708fff9c7f5f29800a1ce5126e56be0c4a0a17f1641c96c9a7142e8db09fdc00a061940d1d8591264075a73a903531977aad79bd444187681e64c8e973dc2cf2528e258e3305d2026bfb2b7088fa7ea19deaa1779212dab992f7bfca090c279f0194f54782cd06c323bfdaf877a8dad6b31a31897cba42430224417be84616ab0d471663a51d9b586bc2e1f63d21ecde21516d576c93d1a5db6ec7f9f69e10b4fa377fb8299f71e22f06b8d5289cdd0f9c1a03dabfdd4f7bfcf3884b674fd511aa7afc", &(0x7f00000012c0)=""/191}, 0x18)
ioctl$PPPIOCGDEBUG(r4, 0x80047441, &(0x7f0000000100))

19:55:22 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:22 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7a000000, 0x0})

19:55:22 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='/group.stat\x00<#\xfbW\xe6\xc6\x0f\x0e\x1f\x02\x94\xe6\x9d\x9a\x1fc\xf8xZ\xd1\x88\xc2l,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0s\x02\xdf[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5|\xd6\xab\xb49\x8c4\b', 0x2761, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080))
r1 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000040))
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000480), &(0x7f00000004c0)=0x8)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
mq_timedsend(r1, &(0x7f00000002c0)="102e46527548feeae306090c0767bf4e192e447dcf05706010eb4618ea14cf7d5c206476e455c8705ae16272745d272c65129de896eb38c724e8dfd66bbacf77acefeb63b8e647cdace73e8c19749f16602eef73bf506f7c3727886c4027e1739b6432b690773a82b44612d96c", 0xffffffffffffff5c, 0x9, 0x0)
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
stat(&(0x7f0000000980)='./file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
name_to_handle_at(r1, &(0x7f0000000000)='./file1\x00', &(0x7f0000000400)={0x79, 0x5fd, "dc04120dc4218e2cb5f227da4037ffffa5a032e2b0a0c7ce1488b483651d5563d8fd4efbafa750e10fd7a7a98171caf6e5b5ca48178c34ac006e54663b2ee2c6db2bd84dd73efce9e798ae7a7a73f0a24e1e5bef89e639029be2e9f224a7a70e5d9a3e2b85f7986be29dde95f0d5977d55"}, &(0x7f0000000200), 0x400)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, 0x0, &(0x7f0000000180))
ioctl$SIOCAX25GETUID(r1, 0x89e0, &(0x7f0000000380)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r3})

19:55:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2})

19:55:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:23 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x100000000000000, 0x0})

19:55:23 executing program 3:
r0 = io_uring_setup(0x604, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x1, 0x3cf})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0xd9, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x2, 0x242})
r2 = dup3(r0, r0, 0x80000)
ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000100))
accept4(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x80800)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x50, r1, 0x0)

19:55:23 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x8, 0x4)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200140, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1a, &(0x7f0000000080)=0x10000, 0x4)
sendmmsg(r0, &(0x7f00000000c0)=[{{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0)

[  677.317715][T30124] binder_alloc_new_buf_locked: 9 callbacks suppressed
[  677.341935][   T26] audit: type=1804 audit(1555358123.195:259): pid=30112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir600474205/syzkaller.cOPVhA/941/file0" dev="sda1" ino=16674 res=1
19:55:23 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000580)="0adc1f123c123f319bc070")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f00000000c0)={"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"})
ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040))

[  677.378156][T30124] binder_alloc: 30114: binder_alloc_buf size 83886096 failed, no address space
19:55:23 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x200000000000000, 0x0})

19:55:23 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
ioctl$sock_ifreq(r0, 0x89b5, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="96f900b93dd32a5cf3cb1ba397ea44ac953bf312c3fde8385bf53e8642223bd5"})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x803, 0x4)
sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0)

[  677.429629][T30124] binder_alloc_new_buf_locked: 9 callbacks suppressed
[  677.429646][T30124] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  677.498192][   T26] audit: type=1800 audit(1555358123.255:260): pid=30112 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=16674 res=0
19:55:23 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e24, 0x3, @local, 0x3ff}, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}, 0xfb0, [0x5, 0x2, 0x7, 0x4, 0x2d, 0x7, 0xfffffffffffff494, 0x945]}, 0x5c)
r1 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r1, 0x9)
accept(r0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x0, 0x0)
ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000280)={0x6, 0xc6})
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f00000002c0)={0x80000001, 0x80})
write(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/114, 0x72)
connect$inet6(r2, &(0x7f0000419000)={0xa, 0x10000000004e20, 0x0, @loopback}, 0x1c)
close(r2)
getsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000200)=0x4)
r6 = accept4(r1, &(0x7f0000000100)=@nl=@unspec, &(0x7f0000000040)=0x2b6, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip6gretap0\x00', 0x10)
recvfrom$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0)

[  677.558592][T30136] binder: 30135:30136 got transaction with unaligned buffers size, 12
[  677.573119][T30141] binder_alloc: 30114: binder_alloc_buf size 83886096 failed, no address space
[  677.609351][T30141] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:23 executing program 3:
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={[], 0xfffffffffffffffe, 0x0, 0x4, 0x2})
ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000080))
syz_open_dev$ndb(0x0, 0xffffffffffffffff, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0)
r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0))
ioctl$RTC_WIE_OFF(r0, 0x7010)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000002c0), 0x4)
prctl$PR_GET_TIMERSLACK(0x1e)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0)
write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x1)
r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0xc903000000000000, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mq_open(&(0x7f0000000280)='[mime_type\x00', 0x0, 0x84, 0x0)
close(r3)
geteuid()
creat(&(0x7f0000000240)='./bus\x00', 0x8)

[  677.659729][T30143] binder: 30135:30143 got transaction with unaligned buffers size, 12
19:55:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:23 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2})

19:55:23 executing program 2:
socket(0x11, 0xe, 0x10000)
setuid(0xee01)
ioprio_set$pid(0x3, 0x0, 0x0)

19:55:23 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x300000000000000, 0x0})

[  677.927294][T30158] binder_alloc: 30153: binder_alloc_buf size 100663312 failed, no address space
[  677.950850][T30158] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:23 executing program 2:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x80)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000380)=0x10)

[  677.989008][T30163] binder: 30162:30163 got transaction with unaligned buffers size, 12
[  678.010946][T30164] binder_alloc: 30153: binder_alloc_buf size 100663312 failed, no address space
[  678.022069][T30164] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  678.033548][T30165] binder: 30162:30165 got transaction with unaligned buffers size, 12
19:55:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:24 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x400000000000000, 0x0})

19:55:24 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2})

19:55:24 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2})

19:55:24 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x500000000000000, 0x0})

[  678.240619][T30176] binder_alloc: 30174: binder_alloc_buf size 117440528 failed, no address space
[  678.267042][T30176] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  678.344523][T30188] binder_alloc: 30174: binder_alloc_buf size 117440528 failed, no address space
[  678.395982][T30188] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070")
r1 = socket$inet6(0xa, 0x10008000f, 0xfffffffffffffffe)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={<r2=>0x0, 0x6b, 0x30}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x2, 0x4, 0x1, 0x4, 0x6100, 0xd5, 0x2, 0x20, <r3=>r2}, &(0x7f0000000200)=0x20)
ppoll(&(0x7f0000000000)=[{r1, 0x41a}], 0x1, 0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x14)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r4, &(0x7f00000005c0)={0x2c, 0x4, r5, 0x38, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)={r3}, &(0x7f0000000280)=0x8)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0xffffffffffffff34)

19:55:24 executing program 3:
r0 = socket$inet(0x10, 0x2, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x5, 0x8, 0x80000000, 0x8, 0xf7})
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="23000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff", 0x23}], 0x1}, 0x0)

[  678.465134][T30186] binder: 30184:30186 got transaction with unaligned buffers size, 12
19:55:24 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  678.531462][T30193] binder: 30184:30193 got transaction with unaligned buffers size, 12
19:55:24 executing program 3:
r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='skcipher\x00', 0x9, 0x2)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000240))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180))
write$binfmt_script(r2, &(0x7f0000000300)=ANY=[], 0xfe08)
recvmmsg(r2, &(0x7f0000001f80)=[{{&(0x7f0000000580)=@ax25={{0x3, @rose}, [@rose, @bcast, @netrom, @netrom, @default, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000600)=""/255, 0xff}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000800)=""/98, 0x62}, {&(0x7f0000000880)=""/210, 0xd2}, {&(0x7f0000000980)=""/234, 0xea}, {&(0x7f0000000a80)=""/194, 0xc2}], 0x6, &(0x7f0000000c00)=""/126, 0x7e}}, {{0x0, 0x0, &(0x7f0000001f40)=[{0x0}], 0x1}}], 0x2, 0x0, 0x0)

[  678.667595][T30202] binder_alloc: 30199: binder_alloc_buf size 167772176 failed, no address space
19:55:24 executing program 1:
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaab8aaaa2aed3d82553775dd060400000000007f00df"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_netdev_private(r0, 0x89fe, &(0x7f0000000040)="31121a91b0941a1006bc0d3d3a1231afb93f82d9a70e460590a9bd2a18165935a6883512fff1b0a4ffd6908c1d48c237e291c56cd9eb1973080d5e50c2b23028c5e68293ba82893d7622a867db")

19:55:24 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x600000000000000, 0x0})

[  678.705883][T30181] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000
[  678.767467][T30202] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:24 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2})

[  678.836306][T30212] binder: 30207:30212 got transaction with unaligned buffers size, 12
[  678.847091][T30214] binder_alloc: 30199: binder_alloc_buf size 167772176 failed, no address space
[  678.851347][T30213] binder: BINDER_SET_CONTEXT_MGR already set
[  678.875421][T30214] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
19:55:24 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'vxcan1\x00'}}, 0x1e)
setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000001c0)=@routing, 0x8)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
listen(r0, 0xb9)
io_setup(0x5, &(0x7f0000000000)=<r1=>0x0)
io_getevents(r1, 0x1, 0x1, &(0x7f0000000080)=[{}], 0x0)
accept4(r0, 0x0, 0x0, 0x0)

[  678.899299][T30181] CPU: 1 PID: 30181 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  678.907530][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  678.917694][T30181] Call Trace:
[  678.921011][T30181]  dump_stack+0x172/0x1f0
[  678.925453][T30181]  dump_header+0x10f/0xb6c
[  678.929900][T30181]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  678.935745][T30181]  ? ___ratelimit+0x60/0x595
[  678.940381][T30181]  ? do_raw_spin_unlock+0x57/0x270
[  678.945625][T30181]  oom_kill_process.cold+0x10/0x15
[  678.950779][T30181]  out_of_memory+0x79a/0x1280
[  678.956302][T30181]  ? lock_downgrade+0x880/0x880
[  678.956318][T30181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  678.956336][T30181]  ? oom_killer_disable+0x280/0x280
[  678.956347][T30181]  ? find_held_lock+0x35/0x130
[  678.956379][T30181]  mem_cgroup_out_of_memory+0x1ca/0x230
[  678.956394][T30181]  ? memcg_event_wake+0x230/0x230
[  678.956418][T30181]  ? do_raw_spin_unlock+0x57/0x270
[  678.967737][T30181]  ? _raw_spin_unlock+0x2d/0x50
[  678.967755][T30181]  try_charge+0x102c/0x15c0
[  678.967768][T30181]  ? find_held_lock+0x35/0x130
[  678.967800][T30181]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  678.967813][T30181]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  678.967827][T30181]  ? find_held_lock+0x35/0x130
[  678.967842][T30181]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  678.967880][T30181]  __memcg_kmem_charge_memcg+0x7c/0x130
[  679.035543][T30181]  ? memcg_kmem_put_cache+0xb0/0xb0
[  679.041826][T30181]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  679.047415][T30181]  __memcg_kmem_charge+0x136/0x300
[  679.052842][T30181]  __alloc_pages_nodemask+0x437/0x7e0
[  679.058331][T30181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.064962][T30181]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  679.070808][T30181]  ? copy_process.part.0+0x1d08/0x7980
[  679.076399][T30181]  ? lockdep_hardirqs_on+0x418/0x5d0
[  679.081714][T30181]  ? trace_hardirqs_on+0x67/0x230
[  679.087055][T30181]  ? kasan_check_read+0x11/0x20
[  679.092570][T30181]  copy_process.part.0+0x3e0/0x7980
[  679.097808][T30181]  ? psi_memstall_leave+0x11c/0x180
[  679.103074][T30181]  ? sched_clock+0x2e/0x50
[  679.107521][T30181]  ? psi_memstall_leave+0x12e/0x180
[  679.112727][T30213] binder: 30199:30213 ioctl 40046207 0 returned -16
[  679.112845][T30181]  ? find_held_lock+0x35/0x130
[  679.119983][T30223] binder: 30207:30223 got transaction with unaligned buffers size, 12
[  679.124504][T30181]  ? psi_memstall_leave+0x12e/0x180
[  679.124530][T30181]  ? __cleanup_sighand+0x60/0x60
[  679.124543][T30181]  ? __lock_acquire+0x548/0x3fb0
19:55:24 executing program 3:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000040)={0x2, 0x2000})
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10)
openat$cgroup_int(r1, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0)
sendmsg(r2, &(0x7f0000000080)={&(0x7f0000001440)=@isdn={0x22, 0x5, 0xffffffffffffffff, 0x1, 0x7}, 0x80}, 0x4000000)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f0000000280)='./file0\x00', 0x40, 0x1, &(0x7f0000001380)=[{&(0x7f0000001300)="aa877ef3a4666d4380c172a08355282549f6c31bb66b80dbc7bbff55e9dc9def28afdfe9d09c6c93ee5a987d9ea5cc28630b3d57aac67e61df5914b3451bf1a957fb1a0b5015fdb88507e1825b3d8222ab126d4dbefebaec88f282886935f8503370", 0x62, 0x3}], 0x10, 0x0)

[  679.124557][T30181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.124592][T30181]  _do_fork+0x257/0xfd0
[  679.158644][T30181]  ? fork_idle+0x1d0/0x1d0
[  679.163262][T30181]  ? blkcg_maybe_throttle_current+0x5e2/0xfc0
[  679.169376][T30181]  ? lock_downgrade+0x880/0x880
[  679.174251][T30181]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.174273][T30181]  ? blkcg_exit_queue+0x30/0x30
[  679.174289][T30181]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  679.174311][T30181]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  679.185444][T30181]  ? do_syscall_64+0x26/0x610
[  679.185459][T30181]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  679.185472][T30181]  ? do_syscall_64+0x26/0x610
[  679.185491][T30181]  __x64_sys_clone+0xbf/0x150
[  679.185508][T30181]  do_syscall_64+0x103/0x610
[  679.185524][T30181]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  679.185544][T30181] RIP: 0033:0x45b5f9
[  679.232210][T30181] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75
[  679.252038][T30181] RSP: 002b:00007fff82f99bd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038
[  679.260448][T30181] RAX: ffffffffffffffda RBX: 00007fe5bd58f700 RCX: 000000000045b5f9
[  679.268423][T30181] RDX: 00007fe5bd58f9d0 RSI: 00007fe5bd58edb0 RDI: 00000000003d0f00
[  679.277126][T30181] RBP: 00007fff82f99de0 R08: 00007fe5bd58f700 R09: 00007fe5bd58f700
[  679.285400][T30181] R10: 00007fe5bd58f9d0 R11: 0000000000000202 R12: 0000000000000000
[  679.293908][T30181] R13: 00007fff82f99c8f R14: 00007fe5bd58f9c0 R15: 000000000073bfac
[  679.303287][T30181] memory: usage 307200kB, limit 307200kB, failcnt 307
[  679.310089][T30181] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  679.318669][T30181] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  679.327442][T30181] Memory cgroup stats for /syz0: cache:0KB rss:266500KB rss_huge:253952KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:266656KB inactive_file:0KB active_file:0KB unevictable:4KB
[  679.349275][T30181] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26394,uid=0
[  679.349409][T30181] Memory cgroup out of memory: Killed process 26394 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  679.406949][T30183] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000
[  679.486514][T30183] CPU: 0 PID: 30183 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  679.494917][T30183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  679.505078][T30183] Call Trace:
[  679.508402][T30183]  dump_stack+0x172/0x1f0
[  679.512755][T30183]  dump_header+0x10f/0xb6c
[  679.517205][T30183]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  679.523030][T30183]  ? ___ratelimit+0x60/0x595
[  679.527633][T30183]  ? do_raw_spin_unlock+0x57/0x270
[  679.532768][T30183]  oom_kill_process.cold+0x10/0x15
[  679.537911][T30183]  out_of_memory+0x79a/0x1280
[  679.542715][T30183]  ? oom_killer_disable+0x280/0x280
[  679.548041][T30183]  mem_cgroup_out_of_memory+0x1ca/0x230
[  679.553637][T30183]  ? memcg_event_wake+0x230/0x230
[  679.558683][T30183]  ? _raw_spin_unlock+0x41/0x50
[  679.563554][T30183]  try_charge+0xa87/0x15c0
[  679.567995][T30183]  ? find_held_lock+0x35/0x130
[  679.572797][T30183]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  679.578360][T30183]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  679.584743][T30183]  ? kasan_check_read+0x11/0x20
[  679.589622][T30183]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  679.596604][T30183]  mem_cgroup_try_charge+0x24d/0x5e0
[  679.601953][T30183]  mem_cgroup_try_charge_delay+0x1f/0xa0
[  679.607702][T30183]  wp_page_copy+0x408/0x1740
[  679.612302][T30183]  ? find_held_lock+0x35/0x130
[  679.617144][T30183]  ? pmd_pfn+0x1d0/0x1d0
[  679.621440][T30183]  ? lock_downgrade+0x880/0x880
[  679.626828][T30183]  ? swp_swapcount+0x540/0x540
[  679.631615][T30183]  ? kasan_check_read+0x11/0x20
[  679.636530][T30183]  ? do_raw_spin_unlock+0x57/0x270
[  679.641657][T30183]  do_wp_page+0x48e/0x1500
[  679.646355][T30183]  ? finish_mkwrite_fault+0x4f0/0x4f0
[  679.652311][T30183]  ? do_raw_spin_lock+0x1cf/0x2e0
[  679.664396][T30183]  __handle_mm_fault+0x22e8/0x3ec0
[  679.669537][T30183]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  679.675237][T30183]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  679.683981][T30183]  handle_mm_fault+0x43f/0xb30
[  679.688810][T30183]  __do_page_fault+0x5ef/0xda0
[  679.693927][T30183]  do_page_fault+0x71/0x581
[  679.698454][T30183]  ? page_fault+0x8/0x30
[  679.702899][T30183]  page_fault+0x1e/0x30
[  679.707093][T30183] RIP: 0033:0x404c58
[  679.711002][T30183] Code: a4 02 00 00 80 3d 3f b8 64 00 00 c6 85 84 00 00 00 00 74 0f 8b 05 2c b8 64 00 39 45 24 0f 84 f7 01 00 00 44 8b a5 80 00 00 00 <e8> 13 d2 ff ff 48 2b 05 ac 33 33 00 8b 75 00 49 89 d8 45 89 e1 4c
[  679.730967][T30183] RSP: 002b:00007fe5bd5afc90 EFLAGS: 00010246
[  679.737262][T30183] RAX: 00007fe5bf5b1000 RBX: 0000000000000a36 RCX: 0000000000458c29
[  679.747819][T30183] RDX: 000000000003ffff RSI: 0000000000000000 RDI: 0000000000000000
[  679.755975][T30183] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  679.764135][T30183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  679.773649][T30183] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  679.796159][T30183] memory: usage 300880kB, limit 307200kB, failcnt 307
[  679.804246][T30183] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  679.812075][T30183] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  679.819772][T30183] Memory cgroup stats for /syz0: cache:0KB rss:260396KB rss_huge:247808KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260424KB inactive_file:0KB active_file:0KB unevictable:4KB
[  679.844098][T30183] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26431,uid=0
[  679.861399][T30183] Memory cgroup out of memory: Killed process 26431 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  679.881328][ T1043] oom_reaper: reaped process 26431 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[  679.891794][T30204] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  679.909678][T30204] CPU: 0 PID: 30204 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  679.917632][T30204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  679.927836][T30204] Call Trace:
[  679.931184][T30204]  dump_stack+0x172/0x1f0
[  679.935632][T30204]  dump_header+0x10f/0xb6c
[  679.940089][T30204]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  679.945952][T30204]  ? ___ratelimit+0x60/0x595
[  679.945969][T30204]  ? do_raw_spin_unlock+0x57/0x270
[  679.945986][T30204]  oom_kill_process.cold+0x10/0x15
[  679.946002][T30204]  out_of_memory+0x79a/0x1280
[  679.946021][T30204]  ? oom_killer_disable+0x280/0x280
[  679.946032][T30204]  ? find_held_lock+0x35/0x130
[  679.946054][T30204]  mem_cgroup_out_of_memory+0x1ca/0x230
[  679.946068][T30204]  ? memcg_event_wake+0x230/0x230
[  679.946088][T30204]  ? do_raw_spin_unlock+0x57/0x270
[  679.946103][T30204]  ? _raw_spin_unlock+0x2d/0x50
[  679.946118][T30204]  try_charge+0xa87/0x15c0
[  679.946139][T30204]  ? find_held_lock+0x35/0x130
[  679.961037][T30204]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  679.961049][T30204]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  679.961063][T30204]  ? find_held_lock+0x35/0x130
[  679.961086][T30204]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  680.027884][T30204]  __memcg_kmem_charge_memcg+0x7c/0x130
[  680.033500][T30204]  ? memcg_kmem_put_cache+0xb0/0xb0
[  680.038827][T30204]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  680.044424][T30204]  __memcg_kmem_charge+0x136/0x300
[  680.049572][T30204]  __alloc_pages_nodemask+0x437/0x7e0
[  680.054978][T30204]  ? ___perf_sw_event+0x393/0x570
[  680.054997][T30204]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  680.055018][T30204]  ? is_dynamic_key+0x1c0/0x1c0
[  680.055032][T30204]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  680.055048][T30204]  alloc_pages_current+0x107/0x210
[  680.055066][T30204]  pte_alloc_one+0x1b/0x1a0
[  680.055084][T30204]  __handle_mm_fault+0x3491/0x3ec0
[  680.055103][T30204]  ? vmf_insert_mixed_mkwrite+0x40/0x40
[  680.055116][T30204]  ? find_held_lock+0x35/0x130
[  680.055138][T30204]  ? handle_mm_fault+0x322/0xb30
[  680.065937][T30204]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  680.065956][T30204]  ? kasan_check_read+0x11/0x20
[  680.065975][T30204]  handle_mm_fault+0x43f/0xb30
[  680.065995][T30204]  __do_page_fault+0x5ef/0xda0
[  680.066017][T30204]  do_page_fault+0x71/0x581
[  680.066030][T30204]  ? page_fault+0x8/0x30
[  680.066045][T30204]  page_fault+0x1e/0x30
[  680.066057][T30204] RIP: 0033:0x458c29
19:55:25 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$key(0xf, 0x3, 0x2)
recvmsg(r1, &(0x7f0000000780)={0x0, 0xffffff9b, 0x0}, 0x0)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x10)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x117, 0x6}}, 0x20)
bind$ax25(r2, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x1, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}, r3}}, 0x38)
sendmsg$key(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f000001b000)={&(0x7f000001bf30)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

19:55:25 executing program 0 (fault-call:10 fault-nth:0):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:25 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x700000000000000, 0x0})

19:55:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:25 executing program 2:
r0 = socket$inet(0x2, 0x80803, 0x1)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/238, &(0x7f0000000100)=0xee)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x340, [0x20000800, 0x0, 0x0, 0x20000830, 0x20000a68], 0x0, 0x0, &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'team_slave_1\x00', 'vlan0\x00', 'veth1_to_team\x00', 'dummy0\x00', @local, [], @empty, [], 0x1d8, 0x1d8, 0x208, [@statistic={'statistic\x00', 0x18}, @comment={'comment\x00', 0x100}]}}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, '\x03\x00sf0\x00\x00\x10\x00', 'dummy0\x00', 'ifb0\x00', 'lo\x00', @broadcast, [], @broadcast, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x3b8)

19:55:25 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r1)
ioctl$PPPIOCDISCONN(r0, 0x7439)
r2 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0)
close(r2)

[  680.066082][T30204] Code: Bad RIP value.
[  680.066090][T30204] RSP: 002b:00007fe5bd5afc78 EFLAGS: 00010246
[  680.157043][T30204] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000458c29
[  680.165140][T30204] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[  680.173137][T30204] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  680.181354][T30204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd5b06d4
[  680.189386][T30204] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  680.241191][T30204] memory: usage 296732kB, limit 307200kB, failcnt 307
[  680.262126][T30245] IPVS: length: 238 != 24
[  680.272327][T30241] binder_transaction: 38 callbacks suppressed
[  680.272346][T30241] binder: 30240:30241 transaction failed 29189/-22, size 0-0 line 2995
19:55:26 executing program 1:
setresuid(0xffffffffffffffff, 0xfffe, 0xffffffffffffffff)
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x82a80)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r1 = geteuid()
setresuid(r1, 0x0, 0x0)
setreuid(0x0, 0x0)

19:55:26 executing program 3:
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000300)="0adc1f123c123f319bd0708e56cb4876a46ba240a523a9f95f2aa3c1c11beb8d0af1f5818507d6f2509df84aa8fd25f777b16c7c65a46639a5ee264711392eda1c60cc46dcef65df2e521b72860f2ed65a04c13df3461310cf6aab7538a60ebcca70485ae05b5539d41c96d85cc5069f587e476d482b1879ae01a9a70d05963c39f157746e2a61ad50de0fca4fe9797e202113798bb5d70bfcef1c10d0d200349d3e39bee7d3dbf294a087fe7724fe92b48a29385cd4eb1a207e8b2e957dd6dd3ae7b34bed6aed24e92fc148edda0eea64ece4eebf8f4175a63fda09b1398e393f5d2a643ad11f6df4201db3")
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={<r1=>0x0, 0x2, 0xbc73, 0x55, 0xfff, 0x1, 0x1, 0x6, {<r2=>0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x7fff, 0x6, 0x3, 0x3, 0x7d}}, &(0x7f0000000000)=0xb0)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r1, 0x22d}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6ea47b39)
sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x13e)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r4 = accept$alg(r3, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000000)=ANY=[@ANYPTR64, @ANYPTR, @ANYRES64=0x0], 0x18)
r5 = syz_open_dev$sndpcmp(&(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', 0x80, 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000440)={0xfffffffffffffe01, 0x4, 0x6, 0x7, r2}, 0x10)
getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000480), &(0x7f0000000500)=0x4)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000600)={r1, @in6={{0xa, 0x4e21, 0x1db0800000000000, @loopback}}}, 0x84)
recvmmsg(r4, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)
fgetxattr(r5, &(0x7f0000000540)=@known='com.apple.system.Security\x00', &(0x7f0000000600), 0x0)
syz_genetlink_get_family_id$nbd(0x0)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b}, 0x300)

[  680.284184][T30204] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  680.297064][T30243] binder_alloc: 30242: binder_alloc_buf size 268435472 failed, no address space
[  680.321548][T30243] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  680.363965][ T7994] binder_release_work: 38 callbacks suppressed
[  680.363974][ T7994] binder: undelivered TRANSACTION_ERROR: 29189
[  680.375745][T30204] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
19:55:26 executing program 1:
r0 = socket$inet6(0xa, 0x100800000000002, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps\x00')
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
sendfile(r0, r1, 0x0, 0x88001)
sendmmsg(r0, &(0x7f0000005780), 0x4000000000000d2, 0x0)

[  680.407845][T30243] binder: 30242:30243 transaction failed 29201/-28, size 268435456-0 line 3148
[  680.408411][T30258] binder: 30240:30258 got transaction with unaligned buffers size, 12
[  680.438060][T30245] IPVS: length: 238 != 24
[  680.460083][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  680.470492][T30243] binder: BINDER_SET_CONTEXT_MGR already set
[  680.472058][T30204] Memory cgroup stats for /syz0: cache:0KB rss:256244KB rss_huge:243712KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:256276KB inactive_file:0KB active_file:4KB unevictable:4KB
[  680.500466][T30258] binder: 30240:30258 transaction failed 29201/-22, size 0-0 line 3211
19:55:26 executing program 3:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000480)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0x80489439, &(0x7f00000004c0))
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000000)=0x1002)

19:55:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x8, 0x4)
r2 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)='/dev/kvm\x00', 0xfffffffffffffff8)
keyctl$unlink(0x9, r2, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil})
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x40000, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r5, 0x10f, 0x85)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)={'raw\x00'}, &(0x7f0000000000)=0x54)
ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000180)={[], 0x0, 0x40})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff})
io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x10c)

[  680.533755][T30243] binder: 30242:30243 ioctl 40046207 0 returned -16
[  680.574251][T30204] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26500,uid=0
[  680.593694][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
19:55:26 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:26 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0xa00000000000000, 0x0})

[  680.647034][T30268] FAULT_INJECTION: forcing a failure.
[  680.647034][T30268] name failslab, interval 1, probability 0, space 0, times 0
[  680.690292][T30204] Memory cgroup out of memory: Killed process 26500 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  680.761572][T30280] binder: 30278:30280 transaction failed 29189/-22, size 0-0 line 2995
[  680.786078][T30281] binder_alloc: 30279: binder_alloc_buf size 536870928 failed, no address space
[  680.786968][ T7994] binder: undelivered TRANSACTION_ERROR: 29189
[  680.795781][ T1043] oom_reaper: reaped process 26500 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB
[  680.823102][T30281] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  680.845867][T30268] CPU: 1 PID: 30268 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  680.853858][T30268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  680.863940][T30268] Call Trace:
[  680.867282][T30268]  dump_stack+0x172/0x1f0
[  680.871665][T30268]  should_fail.cold+0xa/0x15
[  680.878371][T30268]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  680.884513][T30268]  ? ___might_sleep+0x163/0x280
[  680.889427][T30268]  __should_failslab+0x121/0x190
[  680.894415][T30268]  should_failslab+0x9/0x14
[  680.898978][T30268]  kmem_cache_alloc_trace+0x2d1/0x760
[  680.904408][T30268]  kvm_irqfd+0xbe/0x19e0
[  680.908700][T30268]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  680.914992][T30268]  ? _copy_from_user+0xdd/0x150
[  680.920490][T30268]  kvm_vm_ioctl+0x4af/0x1900
[  680.925126][T30268]  ? kvm_unregister_device_ops+0x70/0x70
[  680.930810][T30268]  ? is_dynamic_key+0x1c0/0x1c0
[  680.935699][T30268]  ? kernel_text_address+0x73/0xf0
[  680.940865][T30268]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  680.947159][T30268]  ? _parse_integer+0x139/0x190
[  680.952051][T30268]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  680.958326][T30268]  ? _kstrtoull+0x14c/0x200
[  680.962889][T30268]  ? _parse_integer+0x190/0x190
[  680.967785][T30268]  ? __lock_acquire+0x548/0x3fb0
[  680.972874][T30268]  ? tomoyo_domain+0xc5/0x160
[  680.977677][T30268]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  680.983953][T30268]  ? tomoyo_init_request_info+0x105/0x1d0
[  680.989713][T30268]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  680.995985][T30268]  ? tomoyo_path_number_perm+0x263/0x520
[  681.001655][T30268]  ? tomoyo_execute_permission+0x4a0/0x4a0
[  681.007507][T30268]  ? __fget+0x35a/0x550
[  681.011703][T30268]  ? kvm_unregister_device_ops+0x70/0x70
[  681.017460][T30268]  do_vfs_ioctl+0xd6e/0x1390
[  681.022103][T30268]  ? ioctl_preallocate+0x210/0x210
[  681.027406][T30268]  ? smack_file_ioctl+0x196/0x310
[  681.032585][T30268]  ? smack_inode_rename+0x2d0/0x2d0
[  681.038355][T30268]  ? ksys_dup3+0x3e0/0x3e0
[  681.043379][T30268]  ? tomoyo_file_ioctl+0x23/0x30
[  681.048880][T30268]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  681.055822][T30268]  ? security_file_ioctl+0x93/0xc0
[  681.061389][T30268]  ksys_ioctl+0xab/0xd0
[  681.065894][T30268]  __x64_sys_ioctl+0x73/0xb0
[  681.070859][T30268]  do_syscall_64+0x103/0x610
[  681.076016][T30268]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  681.082383][T30268] RIP: 0033:0x458c29
[  681.086761][T30268] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  681.106859][T30268] RSP: 002b:00007fe5bd58ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  681.115528][T30268] RAX: ffffffffffffffda RBX: 00007fe5bd58ec90 RCX: 0000000000458c29
[  681.124378][T30268] RDX: 00000000200015c0 RSI: 000000004020ae76 RDI: 0000000000000006
[  681.133184][T30268] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  681.141187][T30268] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd58f6d4
[  681.149188][T30268] R13: 00000000004c1ae0 R14: 00000000004d42e0 R15: 0000000000000008
[  681.178167][T30283] binder: 30278:30283 got transaction with unaligned buffers size, 12
[  681.187379][T30281] binder: 30279:30281 transaction failed 29201/-28, size 536870912-0 line 3148
[  681.200248][T30283] binder: 30278:30283 transaction failed 29201/-22, size 0-0 line 3211
[  681.217307][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  681.248149][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  681.252061][T30281] binder: BINDER_SET_CONTEXT_MGR already set
[  681.271138][T30281] binder: 30279:30281 ioctl 40046207 0 returned -16
19:55:27 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:27 executing program 3:
r0 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80800)
ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000b00))
r1 = getpid()
sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r2)
r4 = openat$cgroup_int(r2, &(0x7f0000000080)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000001c0), 0x12)
readv(r3, &(0x7f00000002c0), 0x1a5)

19:55:27 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r1, &(0x7f000000cfe4), 0x1c)
sendmmsg(r1, &(0x7f0000008a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x60, 0x29, 0x3b, "e10984fa3279d7a9e03a22b169d736c06ab11a96f7d25adf9166e34ba01ef80187324065bcda06ab9013268169230973698dc95dde627650790df783841dcbb38ed04b54d5375b9d6a"}], 0x60}}], 0x1, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)

19:55:27 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x1000000000000000, 0x0})

19:55:27 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  681.571161][T30292] binder: 30290:30292 transaction failed 29189/-22, size 0-0 line 2995
19:55:27 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')
dup2(r0, r2)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)

[  681.646326][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  681.665809][T30297] binder: 30289:30297 transaction failed 29201/-28, size 1207959552-0 line 3148
19:55:27 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
dup2(r0, r2)

[  681.698388][T30301] binder: 30290:30301 transaction failed 29201/-22, size 0-0 line 3211
[  681.755835][T30297] binder: BINDER_SET_CONTEXT_MGR already set
[  681.800018][T30297] binder: 30289:30297 ioctl 40046207 0 returned -16
19:55:27 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4800000000000000, 0x0})

[  681.848642][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  681.858909][T30303] binder_alloc: 30289: binder_alloc_buf, no vma
[  681.865735][ T7994] binder: undelivered TRANSACTION_ERROR: 29201
[  681.922089][T30303] binder: 30289:30303 transaction failed 29189/-3, size 1207959552-0 line 3148
19:55:27 executing program 3:
syz_mount_image$vfat(&(0x7f0000000440)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="eb44c86d4f66732e66617400020441000500077008f80000d8c32d9d60c74a6d7df0281ad0cc0b8cbe59628cf9", 0x2d}], 0x0, 0x0)

[  681.993402][ T7994] binder: undelivered TRANSACTION_ERROR: 29189
[  682.167188][T30321] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
[  682.233521][T30321] FAT-fs (loop3): FAT read failed (blocknr 66)
19:55:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000000)={0xf000000, 0x1, 0x0, [], &(0x7f0000000040)={0x98f90a, 0xff, [], @p_u32=&(0x7f00000000c0)}})

19:55:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x4c00000000000000, 0x0})

19:55:28 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x2, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x4000000080000005)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r2 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')
dup2(r0, r2)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)

19:55:28 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x0)
ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f00000007c0))

[  682.355202][T30328] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  682.355214][T30328] binder_alloc: 30327: binder_alloc_buf size 1275068432 failed, no address space
19:55:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6800000000000000, 0x0})

[  682.437861][T30328] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  682.437888][T30328] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:28 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0)

19:55:28 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  682.555690][T30345] binder: BINDER_SET_CONTEXT_MGR already set
19:55:28 executing program 1:
ustat(0x7, &(0x7f0000000000))

[  682.596080][T30345] binder: 30327:30345 ioctl 40046207 0 returned -16
[  682.599739][T30348] binder_transaction: 1 callbacks suppressed
[  682.599753][T30348] binder: 30347:30348 got transaction with unaligned buffers size, 12
[  682.617607][T30346] binder_alloc: 30327: binder_alloc_buf size 1275068432 failed, no address space
[  682.635218][T30350] IPVS: ftp: loaded support on port[0] = 21
[  682.700274][T30346] binder_alloc: allocated: 16 (num: 1 largest: 16), free: 12272 (num: 1 largest: 12272)
[  682.737777][T30358] binder: 30347:30358 got transaction with unaligned buffers size, 12
19:55:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:28 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x6c00000000000000, 0x0})

19:55:28 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0)

19:55:28 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x11, 0x802, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = inotify_init1(0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
inotify_init()
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000000080000005)
inotify_add_watch(r0, &(0x7f0000ac5000)='./file0\x00', 0xa400295c)
r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(r0, r1)

[  682.851576][T30362] binder_alloc: 30361: binder_alloc_buf size 1610612752 failed, no address space
[  682.944857][T30362] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  682.992263][T30366] binder: 30365:30366 got transaction with unaligned buffers size, 12
[  683.011478][T30373] binder_alloc: 30361: binder_alloc_buf size 1610612752 failed, no address space
[  683.040914][T30373] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:28 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x6)
r1 = syz_open_procfs(0x0, &(0x7f0000000980)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\x00\x00\xae\x98&@\xd0\xe6\xbbQ\xff\a\x00\x00\x00\x00\x00\x00\xaa1\x91\x98\xe9\x1f\nMCi|+\xcd\xf9N\xdc\xc5\xa2*\x13\x8f\xf3;\xd6d2\xeb\xe5\x14\x0e\x8b\xda\xb7\xfc9h(mf\'\xa19q\x93\"}G3\xc1E\xe6e6\xc6\xc2u\x11%`\xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xa8\x14Ts\xcb\xde\x84\x1d\xc7\xcc;\xb18')
sendfile(r0, r1, &(0x7f00000000c0)=0x209, 0x5a)

19:55:28 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x5421, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:29 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7400000000000000, 0x0})

19:55:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:29 executing program 1:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffd)
r4 = fcntl$getown(r3, 0x9)
ptrace$pokeuser(0x6, r4, 0x7fe, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000)
r5 = creat(0x0, 0x4)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3)
rmdir(&(0x7f0000000580)='./bus\x00')
write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[], 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x21)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x1}, 0x8)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000008c0)="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")
r6 = socket$inet6(0xa, 0x3, 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801)
setsockopt$inet6_int(r1, 0x29, 0x8f, &(0x7f0000000840)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x800, 0xff, 0x6, 0x5, 0x7, 0xffffffff, 0xcc1, 0x100, 0x7fff, 0x5, 0x7, 0x100000000})
fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x2, r4})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
shutdown(r2, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x8000000000000001, 0x3}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r7, &(0x7f00000000c0)=0x202, 0x8)

[  683.277004][T30384] binder_alloc: 30383: binder_alloc_buf size 1744830480 failed, no address space
19:55:29 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x15)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  683.318567][T30384] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  683.380738][T30388] binder: 30381:30388 got transaction with unaligned buffers size, 12
[  683.405732][T30393] binder_alloc: 30383: binder_alloc_buf size 1744830480 failed, no address space
[  683.460755][T30393] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  683.496194][T30398] binder: 30381:30398 got transaction with unaligned buffers size, 12
[  683.665683][T30350] IPVS: ftp: loaded support on port[0] = 21
19:55:29 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

19:55:29 executing program 1:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffd)
r4 = fcntl$getown(r3, 0x9)
ptrace$pokeuser(0x6, r4, 0x7fe, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000)
r5 = creat(0x0, 0x4)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3)
rmdir(&(0x7f0000000580)='./bus\x00')
write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[], 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x21)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x1}, 0x8)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000008c0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c262b32eced8b5f01e40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d562360718e25bbdb2d34264d6a741cbbed50422f5d")
r6 = socket$inet6(0xa, 0x3, 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801)
setsockopt$inet6_int(r1, 0x29, 0x8f, &(0x7f0000000840)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x800, 0xff, 0x6, 0x5, 0x7, 0xffffffff, 0xcc1, 0x100, 0x7fff, 0x5, 0x7, 0x100000000})
fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x2, r4})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
shutdown(r2, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x8000000000000001, 0x3}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r7, &(0x7f00000000c0)=0x202, 0x8)

19:55:29 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x7a00000000000000, 0x0})

19:55:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  683.916064][T30415] IPVS: ftp: loaded support on port[0] = 21
19:55:29 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x8000000000000000, 0x0})

[  683.962488][T30411] binder_alloc: 30408: binder_alloc_buf size 1811939344 failed, no address space
19:55:29 executing program 1:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffd)
r4 = fcntl$getown(r3, 0x9)
ptrace$pokeuser(0x6, r4, 0x7fe, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000)
r5 = creat(0x0, 0x4)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3)
rmdir(&(0x7f0000000580)='./bus\x00')
write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[], 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x21)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x1}, 0x8)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000008c0)="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")
r6 = socket$inet6(0xa, 0x3, 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="020029bd7000fedbdf2503000000cc0004004c00070008000300ffffffff0800030000000000080003000200000008000200ff0f00000800040002000000418e0300d9edffff0700010018000000080001001400000008000400080000000c00010073797a300000000044000700000001000900000008000100050000000800030000080000080002000000000008a58affffffffffff0001000d000000080004001301000008000300080000000c00010073797a31000200000c00010073797a31000000001400010062726f6164636173742d6c696e6b008066b5b5fb44fc99cace02c13b1d748945089570db5bab3b5135c9db327928252dea538a035ab811563dc238150974ed87ff861c515f5b0d3a13e2491bd35190a3b649f54b3f8c36f9a059c1317fa65166f34f81d6a80a2db5125e78737e3400ca06d66fe01566a0bb5fc0f9d8831368e6f22ffc387bea9cd0a8783ba2c9d6e333852291d3ebe9dbb2d9c51b5599ddfe2d12f53fba688c05b11adc2f224f3e5d67d51a3a2c0424ac0416236f3b6024cf7732f2e2b95c5fd10ccf80283fe6a94863454767709b345fbb2449fda409c51426956185874ebc90d099a4f7d8ecd59d3db9b26a35c07dae47ff3145538e4d44fd2bc1a8f67600d56fff6cd8640596b8fb8bd4b9b11bae57ce298c0f50000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801)
setsockopt$inet6_int(r1, 0x29, 0x8f, &(0x7f0000000840)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x800, 0xff, 0x6, 0x5, 0x7, 0xffffffff, 0xcc1, 0x100, 0x7fff, 0x5, 0x7, 0x100000000})
fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x2, r4})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
shutdown(r2, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x8000000000000001, 0x3}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r7, &(0x7f00000000c0)=0x202, 0x8)

[  684.034242][T30411] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  684.090703][T30419] binder: 30418:30419 got transaction with unaligned buffers size, 12
[  684.128959][T30424] binder_alloc: 30408: binder_alloc_buf size 1811939344 failed, no address space
19:55:30 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x5450, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

[  684.167602][T30424] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  684.188405][T30423] binder: 30418:30423 got transaction with unaligned buffers size, 12
19:55:30 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0xffffffff00000000, 0x0})

19:55:30 executing program 1:
r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x8040, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000300)=0x41b)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
r3 = socket$inet6(0xa, 0x7, 0xfffffffffffffffd)
r4 = fcntl$getown(r3, 0x9)
ptrace$pokeuser(0x6, r4, 0x7fe, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000)
r5 = creat(0x0, 0x4)
setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3)
rmdir(&(0x7f0000000580)='./bus\x00')
write$binfmt_elf64(r3, &(0x7f00000007c0)=ANY=[], 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0x21)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x1}, 0x8)
ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f00000008c0)="31d96da88b0cce5062747ce237ca24f05b05df66b34814c1cdb2db3642a7c880224c03d6cffd67b36c7f1a51ae9aeaa3892b040ba2105d77d4e4579d745ad601f19c26d1260bcd5435ae4ad35d123f7e809a7b0576431fde9f78c3260a3837b52ef6437c404147add96892a9d3a67dcf93c198c3b7727cd266c20c5e584c28ae0843064b8f7f199db8641f71a407775e0090bbedee63a4640e1f012e5ca95bd14b5aa0da642b552ae4aa2b869458dec283c16f25c67068fc528a793f75c81acac8ee6596d79c449ade5eeee332c460ebc0d46c076e871b6426d521c571a95d0fa800de30a110e719ffde8f103773daaaec8c313aa3be0bdaa6e7e796df3975a8e37aee6d10579f8afe6552f187c262b32eced8b5f01e40ab8904400f00000000000000000000000000000058b4721949da012002cb7f4ac8fe195c1388861be8cd45020083b0089b23f86603321faf83e794bea1ece8051e9996306347bd562aa2437fa6bdb57086302926b8af069b8d331ebf5c0e1a7f163e6d711af330efdfae413fafef9acf1d53e6aaf4f2dec9ddfb4ca321583e35a14a92e82bdbea3c127a033b32059fbadce23a3e87957f8238886aa9380000000018888c4c20ba104342e8c9d85a9dcf06abbb7a2905d37839bff6f8641ebce172c60a8d368cd4a94af484749dc4ccdd380bbf5d501302d50e79d3536eab5a12abdd347dac985c4349ec712661df947315514e45a515417e6b00000000000000002bdacdb2631c83a90dbca3aa7e5936f8aa413a75c7780309e1c178bce65ed205154ab4f55241cd2b6e83b29fc6cefe050d7d562360718e25bbdb2d34264d6a741cbbed50422f5d")
r6 = socket$inet6(0xa, 0x3, 0x6)
sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x801)
setsockopt$inet6_int(r1, 0x29, 0x8f, &(0x7f0000000840)=0x1, 0x4)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x800, 0xff, 0x6, 0x5, 0x7, 0xffffffff, 0xcc1, 0x100, 0x7fff, 0x5, 0x7, 0x100000000})
fcntl$setownex(r5, 0xf, &(0x7f0000000180)={0x2, r4})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
shutdown(r2, 0x0)
fsetxattr$trusted_overlay_redirect(r3, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./bus\x00', 0xffffffffffffff69, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x8000000000000001, 0x3}, 0x20)
r7 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r6, r7, &(0x7f00000000c0)=0x202, 0x8)

19:55:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:30 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x15)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  684.477241][T30438] binder_alloc: 30437: binder_alloc_buf size 1946157072 failed, no address space
19:55:30 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2020011, r1, 0x0)
openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  684.556707][T30438] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  684.605126][T30426] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  684.630054][T30447] binder_alloc: 30437: binder_alloc_buf size 1946157072 failed, no address space
[  684.655953][T30447] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  684.669234][T30426] CPU: 0 PID: 30426 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  684.677201][T30426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  684.687461][T30426] Call Trace:
[  684.690899][T30426]  dump_stack+0x172/0x1f0
[  684.695358][T30426]  dump_header+0x10f/0xb6c
[  684.699929][T30426]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  684.705821][T30426]  ? ___ratelimit+0x60/0x595
[  684.712374][T30426]  ? do_raw_spin_unlock+0x57/0x270
[  684.720397][T30426]  oom_kill_process.cold+0x10/0x15
[  684.725550][T30426]  out_of_memory+0x79a/0x1280
[  684.730279][T30426]  ? lock_downgrade+0x880/0x880
[  684.735166][T30426]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  684.741447][T30426]  ? oom_killer_disable+0x280/0x280
[  684.748282][T30426]  ? find_held_lock+0x35/0x130
[  684.753093][T30426]  mem_cgroup_out_of_memory+0x1ca/0x230
[  684.758673][T30426]  ? memcg_event_wake+0x230/0x230
[  684.763740][T30426]  ? do_raw_spin_unlock+0x57/0x270
[  684.769004][T30426]  ? _raw_spin_unlock+0x2d/0x50
[  684.773030][T30445] binder: 30444:30445 got transaction with unaligned buffers size, 12
[  684.773973][T30426]  try_charge+0x102c/0x15c0
[  684.773991][T30426]  ? find_held_lock+0x35/0x130
[  684.774014][T30426]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  684.774037][T30426]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  684.802769][T30426]  ? find_held_lock+0x35/0x130
[  684.807578][T30426]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  684.813164][T30426]  __memcg_kmem_charge_memcg+0x7c/0x130
[  684.818775][T30426]  ? memcg_kmem_put_cache+0xb0/0xb0
[  684.824035][T30426]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  684.829622][T30426]  __memcg_kmem_charge+0x136/0x300
[  684.834881][T30426]  __alloc_pages_nodemask+0x437/0x7e0
[  684.840334][T30426]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  684.845847][T30426]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  684.851644][T30426]  ? copy_page_range+0x125a/0x1f90
[  684.856897][T30426]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  684.863262][T30426]  alloc_pages_current+0x107/0x210
[  684.868416][T30426]  pte_alloc_one+0x1b/0x1a0
[  684.873212][T30426]  __pte_alloc+0x20/0x310
[  684.879115][T30426]  copy_page_range+0x1529/0x1f90
[  684.884516][T30426]  ? find_held_lock+0x35/0x130
[  684.889515][T30426]  ? pmd_alloc+0x180/0x180
[  684.893980][T30426]  ? __rb_insert_augmented+0x231/0xdf0
[  684.899556][T30426]  ? validate_mm_rb+0xa3/0xc0
[  684.904398][T30426]  ? __vma_link_rb+0x279/0x370
[  684.909196][T30426]  copy_process.part.0+0x568b/0x7980
[  684.914636][T30426]  ? __cleanup_sighand+0x60/0x60
[  684.919674][T30426]  _do_fork+0x257/0xfd0
[  684.923881][T30426]  ? fork_idle+0x1d0/0x1d0
[  684.928343][T30426]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  684.933846][T30426]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  684.939346][T30426]  ? do_syscall_64+0x26/0x610
[  684.944082][T30426]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  684.950192][T30426]  ? do_syscall_64+0x26/0x610
19:55:30 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

19:55:30 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  684.954912][T30426]  __x64_sys_clone+0xbf/0x150
[  684.959634][T30426]  do_syscall_64+0x103/0x610
[  684.964355][T30426]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  684.966142][T30452] IPVS: ftp: loaded support on port[0] = 21
[  684.970306][T30426] RIP: 0033:0x458c29
[  684.970323][T30426] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
19:55:30 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})
r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xdb, 0x10000)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000040))

[  684.970330][T30426] RSP: 002b:00007fe5bd5afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  684.970343][T30426] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29
[  684.970352][T30426] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[  684.970361][T30426] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  684.970368][T30426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd5b06d4
[  684.970376][T30426] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
19:55:30 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  685.013269][T30426] memory: usage 307200kB, limit 307200kB, failcnt 354
[  685.039035][T30456] binder: 30455:30456 got transaction with unaligned buffers size, 12
[  685.050553][T30454] IPVS: ftp: loaded support on port[0] = 21
[  685.079500][T30457] binder: 30455:30457 got transaction with unaligned buffers size, 12
[  685.091704][T30426] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  685.112214][T30426] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
19:55:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000001c0)={{0x400, 0x9}, 'port0\x00', 0x4, 0x20, 0x7, 0x8001, 0x3, 0x2, 0x9, 0x0, 0x2, 0xfffffffffffffffb})
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  685.146161][T30426] Memory cgroup stats for /syz0: cache:0KB rss:264960KB rss_huge:251904KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:265016KB inactive_file:0KB active_file:0KB unevictable:4KB
19:55:31 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x408040, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000100)={0x0, 0xf548, 0x2, 0x50, &(0x7f0000001000/0x1000)=nil, 0x5})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x20000)
ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0x0, 0x829, 0x7, 0x6, 0x6, 0x9, 0x1, 0x9, 0x4, 0x10000, 0x1, 0x1})

[  685.266870][T30426] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26534,uid=0
[  685.285481][T30467] binder_transaction: 28 callbacks suppressed
[  685.285500][T30467] binder: 30462:30467 transaction failed 29201/-28, size 2046820352-0 line 3148
[  685.356053][T30470] binder: 30469:30470 transaction failed 29201/-22, size 0-0 line 3211
[  685.393385][T26823] binder_release_work: 28 callbacks suppressed
[  685.393394][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  685.416491][T30426] Memory cgroup out of memory: Killed process 26534 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
[  685.431646][T30471] binder: 30469:30471 transaction failed 29201/-22, size 0-0 line 3211
[  685.490911][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  685.524142][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  685.532076][T30467] binder: BINDER_SET_CONTEXT_MGR already set
[  685.548029][T30474] binder: 30462:30474 transaction failed 29189/-22, size 2046820352-0 line 2995
[  685.588749][T30467] binder: 30462:30467 ioctl 40046207 0 returned -16
[  685.606529][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
[  685.618512][T30433] syz-executor.0 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000
[  685.975544][T30433] CPU: 0 PID: 30433 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  685.983987][T30433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  685.994165][T30433] Call Trace:
[  685.997673][T30433]  dump_stack+0x172/0x1f0
[  686.002051][T30433]  dump_header+0x10f/0xb6c
[  686.006634][T30433]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  686.012482][T30433]  ? ___ratelimit+0x60/0x595
[  686.017225][T30433]  ? do_raw_spin_unlock+0x57/0x270
[  686.022406][T30433]  oom_kill_process.cold+0x10/0x15
[  686.027565][T30433]  out_of_memory+0x79a/0x1280
[  686.032282][T30433]  ? oom_killer_disable+0x280/0x280
[  686.037512][T30433]  ? find_held_lock+0x35/0x130
[  686.042325][T30433]  mem_cgroup_out_of_memory+0x1ca/0x230
[  686.047924][T30433]  ? memcg_event_wake+0x230/0x230
[  686.053024][T30433]  ? do_raw_spin_unlock+0x57/0x270
[  686.058259][T30433]  ? _raw_spin_unlock+0x2d/0x50
[  686.063254][T30433]  try_charge+0xa87/0x15c0
[  686.067801][T30433]  ? find_held_lock+0x35/0x130
[  686.072606][T30433]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  686.078196][T30433]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  686.083785][T30433]  ? find_held_lock+0x35/0x130
[  686.088695][T30433]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  686.094293][T30433]  __memcg_kmem_charge_memcg+0x7c/0x130
[  686.099921][T30433]  ? memcg_kmem_put_cache+0xb0/0xb0
[  686.105294][T30433]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  686.110899][T30433]  __memcg_kmem_charge+0x136/0x300
[  686.116071][T30433]  __alloc_pages_nodemask+0x437/0x7e0
[  686.121480][T30433]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  686.127756][T30433]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  686.133629][T30433]  ? __kmalloc_node+0x3d/0x70
[  686.138439][T30433]  ? kasan_unpoison_shadow+0x35/0x50
[  686.143823][T30433]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  686.150204][T30433]  alloc_pages_current+0x107/0x210
[  686.155370][T30433]  __vmalloc_node_range+0x4b0/0x790
[  686.160631][T30433]  ? kvm_dev_ioctl+0xc76/0x15e0
[  686.165521][T30433]  __vmalloc_node_flags_caller+0x71/0x90
[  686.171289][T30433]  ? kvm_dev_ioctl+0xc76/0x15e0
[  686.176282][T30433]  kvmalloc_node+0xdc/0x100
[  686.180848][T30433]  kvm_dev_ioctl+0xc76/0x15e0
[  686.185852][T30433]  ? kvm_debugfs_release+0x90/0x90
[  686.191016][T30433]  ? __fget+0x35a/0x550
[  686.195254][T30433]  ? kvm_debugfs_release+0x90/0x90
[  686.200491][T30433]  do_vfs_ioctl+0xd6e/0x1390
[  686.205125][T30433]  ? ioctl_preallocate+0x210/0x210
[  686.210313][T30433]  ? smack_file_ioctl+0x196/0x310
[  686.215377][T30433]  ? smack_inode_rename+0x2d0/0x2d0
[  686.220626][T30433]  ? nsecs_to_jiffies+0x30/0x30
[  686.225518][T30433]  ? tomoyo_file_ioctl+0x23/0x30
[  686.230491][T30433]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  686.236769][T30433]  ? security_file_ioctl+0x93/0xc0
[  686.242290][T30433]  ksys_ioctl+0xab/0xd0
[  686.246490][T30433]  __x64_sys_ioctl+0x73/0xb0
[  686.251146][T30433]  do_syscall_64+0x103/0x610
[  686.255893][T30433]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  686.261831][T30433] RIP: 0033:0x458c29
[  686.265770][T30433] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  686.285488][T30433] RSP: 002b:00007fe5bd58ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  686.294027][T30433] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458c29
[  686.302033][T30433] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004
[  686.310036][T30433] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  686.318036][T30433] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd58f6d4
[  686.326612][T30433] R13: 00000000004c1788 R14: 00000000004d3f68 R15: 00000000ffffffff
[  686.342973][T30433] memory: usage 303044kB, limit 307200kB, failcnt 354
[  686.364771][T30433] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  686.395250][T30433] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  686.404884][T30433] Memory cgroup stats for /syz0: cache:0KB rss:260852KB rss_huge:247808KB shmem:84KB mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260852KB inactive_file:0KB active_file:0KB unevictable:4KB
[  686.428263][T30433] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26634,uid=0
[  686.447502][T30433] Memory cgroup out of memory: Killed process 26634 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
19:55:32 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x5451, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:32 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x15)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

19:55:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x1, 0x9, 0x7, 0x2}, 0x10)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:32 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

19:55:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:32 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x100000000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x2, @sliced})

[  686.533495][T30481] binder: 30480:30481 transaction failed 29189/-22, size 0-0 line 2995
[  686.564050][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  686.578340][T30487] IPVS: ftp: loaded support on port[0] = 21
[  686.631591][T30483] binder: 30482:30483 transaction failed 29201/-28, size 4261281791-0 line 3148
19:55:32 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  686.678014][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  686.696247][T30498] binder: 30482:30498 transaction failed 29201/-28, size 4261281791-0 line 3148
19:55:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x11, 0x802, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r1 = inotify_init1(0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=@random={'os2.', 'bpq0\x00'}, &(0x7f0000000200)=""/140, 0x8c)
r2 = inotify_init()
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@empty, @remote, @remote}, 0xc)
inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0x4000000080000005)
r3 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
rmdir(&(0x7f0000000040)='./file0\x00')
dup2(r1, r3)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000000c0)={{0x2, 0x0, @dev}, {0x0, @random="4f444d006fc4"}, 0xe, {0x2, 0x0, @initdev}, 'bpq0\x00'})

[  686.816209][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  686.836264][T30502] binder_alloc: 30482: binder_alloc_buf failed to map pages in userspace, no vma
19:55:32 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  686.924455][T30502] binder: 30501:30502 transaction failed 29189/-3, size 0-0 line 3148
[  687.005706][ T7967] binder: undelivered TRANSACTION_ERROR: 29189
19:55:32 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x100000000)
listen(r0, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x410002, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x7fffffff)

[  687.092545][T30511] binder: 30509:30511 transaction failed 29201/-28, size 4294966781-0 line 3148
[  687.126739][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  687.160410][T30518] binder: 30509:30518 transaction failed 29201/-28, size 4294966781-0 line 3148
[  687.192531][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
19:55:33 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000140)={0x8, 0x3, 0x80, 0x5, 0xfffffffffffffffc})
r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getegid()
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8100000d, 0x4010, r4, 0x0)
r5 = gettid()
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x2, r5})
ioctl$sock_ifreq(r3, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\x17\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'})

19:55:33 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x40, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000014000000005e25a31653d80000000000000000000078450000000000000000000000000000000000000600000000f4c442a73b07bc61000000000000000000000000003a93ffe2cb5f590c0314bf447b30d0b39d61055d2178ce7601e423686c595b121e573b7cbc94a8639bfee072813efec6dcd8cb2087d3c2287505fd34f11a4cd9be7ab0923d93f9abe025fb21f237948fdb4be6b18d86e5f782fa569ca78f15d9bd2c0a620ed8389179016642fd7110d15d2233001583096e7b7b2fdb3d7581a0ec9fb3a0fa9f8903c87e5cbcedba607e5931e67584308f1778fc2e94bf0844b5"], 0x0, 0x0, 0x0})

19:55:33 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x5452, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:33 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:33 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
r1 = gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
tkill(r1, 0x15)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  687.901166][T30538] binder_alloc_new_buf_locked: 5 callbacks suppressed
[  687.901179][T30538] binder_alloc: 30536: binder_alloc_buf size 72057594037927952 failed, no address space
[  687.963216][T30538] binder_alloc_new_buf_locked: 5 callbacks suppressed
[  687.963236][T30538] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  688.006530][T30544] binder_alloc: 30536: binder_alloc_buf size 72057594037927952 failed, no address space
[  688.021961][T30544] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:34 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

19:55:34 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
getpgrp(0xffffffffffffffff)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup(r2)
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000006c0)="548ed6165aa4ce2ab0a702b6814740a54ab93debd8ba7e530d9780da334c2af0cdb9460823ffeac34eb16296dd7ee92139052505ae0ac5b8a9c51238cd9548d3c9d2eb23b4d0d928e821cf83a2ff4d1dc6635fb820beb5bdc216347e1481100b2da3e3f0acb860a4c5e10cf89cdb18fcbac947afc9b197127fadadc2257dbf5763d502d650767aa7a478c4581a612a87822b6bebf1b3756158fc4b5f0dd0e542795102980b133219bf731d297697dc894154ba56bd", 0xb5)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback})
ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000240)={0x8001, 0x0, 0x901})
add_key(&(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000780)="a43774df3a40cd99ed2e95e32b0bc88fdc73cf21de9a71d493c0b6749546981ab463fe7231b45f3ed06b62a8c65c3b871038624e60a6728496b05f74bb5bc85ceefb9d955e22e53b33b9eaf0022f95c3c60b4341a0345ba237d00999b79d6d80364ed1c84d5f8e59c2a5538b4ae996152cf6811f287678dac51797d3bfff9316", 0x80, 0xfffffffffffffff8)
request_key(&(0x7f0000000000)='logon\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f00000002c0)='/\x00', 0x0)
r4 = semget$private(0x0, 0x3, 0x84)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000180))
semctl$GETPID(r4, 0x4, 0xb, &(0x7f0000000040)=""/125)
readahead(0xffffffffffffffff, 0x5, 0xf83)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00')
syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00')
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0)
r5 = openat$cgroup_int(r3, &(0x7f0000000300)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
write$P9_RRENAMEAT(r3, &(0x7f0000000200)={0x7, 0x4b, 0x1}, 0x7)
ioctl$LOOP_SET_CAPACITY(r5, 0x4c07)
dup(0xffffffffffffffff)
r6 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x5, 0x1c241)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x0)

19:55:34 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x4000)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={<r1=>0x0, @in6={{0xa, 0x4e24, 0x100, @ipv4={[], [], @empty}}}, 0x40, 0x5, 0x9, 0xffff}, &(0x7f0000000040)=0x98)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r1, 0x3}, &(0x7f0000000100)=0x8)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYBLOB], 0x248, 0x0, 0x0})

19:55:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = dup2(r1, r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_team\x00', r4})
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10)
r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r5, 0x0)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f00000001c0)=0x9)

[  688.358929][T30556] IPVS: ftp: loaded support on port[0] = 21
[  688.399506][T30560] binder_alloc: 30551: binder_alloc_buf size 144115188075855888 failed, no address space
[  688.447389][T30560] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0x1e8, 0x1e8, 0x1e8, 0x128, 0x1e8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x2a8, 0x4, &(0x7f0000000000), {[{{@ip={@empty, @local, 0xff, 0xffffffff, 'bridge0\x00', 'ip6erspan0\x00', {}, {0xff}, 0x84, 0x1, 0x52}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@udplite={0x30, 'udplite\x00', 0x0, {0x4e20, 0x4e22, 0x4e21, 0x4e22, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0x2, [0x37, 0xa, 0x3c, 0x16, 0x1a, 0x25, 0x1d, 0x1e, 0x3a, 0x3b, 0x8, 0x3f, 0x1a, 0x5, 0x1d, 0x31], 0x2, 0x100000000000000, 0x20}}}, {{@ip={@multicast2, @multicast2, 0xff, 0xffffff00, 'team_slave_0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x23, 0x3, 0x1}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
shutdown(r3, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="116348420000000000000000000000000000000000000000008426bcdb2460e3d30000000000b80b34ba000000000000000e0000000000000000000000000002000000000000000000000000ec66009c1e866e4d361abb3a223bdb9b1468d9cce9c94c2e8028bf52c8b4b2a2d3e09449b807843afb8a09f73ff13145cd33f31bdf152c291b5e6940278586e41b974d6ab1cfda5a5cd1d88e30447230cf90411c61c0c1b26e9923797787ffe3fc16c632dffaccf08d9bb7408150f884090e77093265249b7fb55abd1e701987918baada938bdb43"], 0x0, 0x0, 0x0})

[  688.603685][T30554] binder_alloc: 30551: binder_alloc_buf size 144115188075855888 failed, no address space
[  688.658988][T30554] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:34 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  688.729276][T30567] binder: 30566:30567 unknown command 1112040209
19:55:34 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0x5460, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:34 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  688.814045][T30567] binder: 30566:30567 ioctl c0306201 20007000 returned -22
19:55:34 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000840)={0x10, 0xffffffffffffffda, 0x4}, 0x10)

19:55:34 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  688.927749][T30579] binder: 30566:30579 unknown command 1112040209
[  688.952892][T30579] binder: 30566:30579 ioctl c0306201 20007000 returned -22
[  688.994812][T30582] binder_alloc: 30575: binder_alloc_buf size 216172782113783824 failed, no address space
[  689.025810][T30582] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
19:55:35 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000000000000, 0x800020011, r0, 0xfffffffffffffffd)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  689.104284][T30588] binder_alloc: 30575: binder_alloc_buf size 216172782113783824 failed, no address space
[  689.163714][T30588] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  689.209287][T30593] binder_transaction: 4 callbacks suppressed
[  689.209306][T30593] binder: 30592:30593 got transaction with unaligned buffers size, 12
19:55:35 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x80000081)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000))
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040))

19:55:35 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000e, 0x33, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000000000000000000000004600000000000000000000000000000000000000000c00000000000000742e8e279ab6800000000000eae9e9b4ec9ce028df2fb67bf00dcb8c32946b4d692f877e0d109605b71f2c39954dea000000000000000000"], 0x0, 0x0, 0x0})

19:55:35 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  689.624217][T30578] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  689.662403][T30603] binder_alloc: 30602: binder_alloc_buf size 288230376151711760 failed, no address space
[  689.683292][T30607] IPVS: ftp: loaded support on port[0] = 21
[  689.691552][T30578] CPU: 0 PID: 30578 Comm: syz-executor.0 Not tainted 5.1.0-rc5 #68
[  689.699492][T30578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  689.709921][T30578] Call Trace:
[  689.713244][T30578]  dump_stack+0x172/0x1f0
[  689.717606][T30578]  dump_header+0x10f/0xb6c
[  689.722052][T30578]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  689.722070][T30578]  ? ___ratelimit+0x60/0x595
[  689.722088][T30578]  ? do_raw_spin_unlock+0x57/0x270
[  689.722108][T30578]  oom_kill_process.cold+0x10/0x15
[  689.722124][T30578]  out_of_memory+0x79a/0x1280
[  689.722147][T30578]  ? lock_downgrade+0x880/0x880
[  689.752858][T30578]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  689.752886][T30578]  ? oom_killer_disable+0x280/0x280
[  689.752900][T30578]  ? find_held_lock+0x35/0x130
[  689.752925][T30578]  mem_cgroup_out_of_memory+0x1ca/0x230
[  689.752941][T30578]  ? memcg_event_wake+0x230/0x230
[  689.752963][T30578]  ? do_raw_spin_unlock+0x57/0x270
[  689.752978][T30578]  ? _raw_spin_unlock+0x2d/0x50
[  689.752993][T30578]  try_charge+0x102c/0x15c0
[  689.753009][T30578]  ? trace_hardirqs_on_caller+0x6a/0x220
[  689.753024][T30578]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  689.753043][T30578]  ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[  689.753055][T30578]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  689.753070][T30578]  ? find_held_lock+0x35/0x130
[  689.753086][T30578]  ? get_mem_cgroup_from_mm+0x10b/0x2b0
[  689.753112][T30578]  __memcg_kmem_charge_memcg+0x7c/0x130
[  689.753127][T30578]  ? memcg_kmem_put_cache+0xb0/0xb0
[  689.753144][T30578]  ? get_mem_cgroup_from_mm+0x128/0x2b0
[  689.753162][T30578]  __memcg_kmem_charge+0x136/0x300
[  689.753182][T30578]  __alloc_pages_nodemask+0x437/0x7e0
[  689.753193][T30578]  ? retint_kernel+0x2d/0x2d
[  689.753207][T30578]  ? trace_hardirqs_on_caller+0x6a/0x220
[  689.753231][T30578]  ? __alloc_pages_slowpath+0x28b0/0x28b0
[  689.780263][T30578]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  689.780284][T30578]  ? retint_kernel+0x2d/0x2d
[  689.780301][T30578]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  689.780321][T30578]  alloc_pages_current+0x107/0x210
[  689.780341][T30578]  pte_alloc_one+0x1b/0x1a0
[  689.780359][T30578]  __pte_alloc+0x20/0x310
[  689.780382][T30578]  copy_page_range+0x1529/0x1f90
[  689.811565][T30578]  ? pmd_alloc+0x180/0x180
[  689.811580][T30578]  ? vma_compute_subtree_gap+0x158/0x230
[  689.811597][T30578]  ? validate_mm_rb+0xa3/0xc0
[  689.811613][T30578]  ? __vma_link_rb+0x279/0x370
[  689.811636][T30578]  copy_process.part.0+0x568b/0x7980
[  689.811673][T30578]  ? __cleanup_sighand+0x60/0x60
[  689.848973][T30578]  ? _do_fork+0xf8/0xfd0
[  689.848995][T30578]  _do_fork+0x257/0xfd0
[  689.849018][T30578]  ? fork_idle+0x1d0/0x1d0
[  689.849044][T30578]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  689.849067][T30578]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  689.880476][T30578]  ? do_syscall_64+0x26/0x610
[  689.880493][T30578]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  689.880506][T30578]  ? do_syscall_64+0x26/0x610
[  689.880527][T30578]  __x64_sys_clone+0xbf/0x150
[  689.880547][T30578]  do_syscall_64+0x103/0x610
[  689.880565][T30578]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  689.880577][T30578] RIP: 0033:0x458c29
[  689.880600][T30578] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  689.915997][T30578] RSP: 002b:00007fe5bd5afc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  689.916014][T30578] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29
19:55:35 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

19:55:35 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:35 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
gettid()
timer_settime(0x0, 0x0, &(0x7f00000016c0)={{}, {0x0, 0x989680}}, 0x0)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  689.916021][T30578] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000000000
[  689.916028][T30578] RBP: 000000000073bf00 R08: ffffffffffffffff R09: 0000000000000000
[  689.916036][T30578] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe5bd5b06d4
[  689.916045][T30578] R13: 00000000004befd3 R14: 00000000004d0020 R15: 00000000ffffffff
[  689.932838][T30603] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  689.953529][T30578] memory: usage 307200kB, limit 307200kB, failcnt 382
[  689.977483][T30613] binder_alloc: 30602: binder_alloc_buf size 288230376151711760 failed, no address space
[  689.977509][T30613] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  690.019703][T30615] IPVS: ftp: loaded support on port[0] = 21
[  690.051266][T30578] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[  690.116980][T30617] binder: 30616:30617 got transaction with unaligned buffers size, 12
[  690.134399][T30620] binder: 30616:30620 got transaction with unaligned buffers size, 12
[  690.169321][T30578] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  690.196633][T30578] Memory cgroup stats for /syz0: cache:0KB rss:263272KB rss_huge:249856KB shmem:84KB
[  690.196872][T30578]  mapped_file:132KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:263372KB inactive_file:0KB active_file:0KB unevictable:4KB
[  690.313272][T30578] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null)
[  690.313311][T30578] ,cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=26664,uid=0
[  690.333600][T30578] Memory cgroup out of memory: Killed process 26664 (syz-executor.0) total-vm:72448kB, anon-rss:6304kB, file-rss:34816kB, shmem-rss:0kB
19:55:36 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0xae03, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x8, 0x6, 0x8b33, 0x1, 0x4, 0x3})
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800c00"/76], 0x0, 0x0, 0x0})

19:55:36 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  690.767224][T30633] binder_transaction: 15 callbacks suppressed
[  690.767243][T30633] binder: 30632:30633 transaction failed 29189/-22, size 0-0 line 2995
[  690.807112][T26823] binder_release_work: 15 callbacks suppressed
19:55:36 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  690.807162][T26823] binder: undelivered TRANSACTION_ERROR: 29189
[  690.808937][T30638] binder_alloc: 30635: binder_alloc_buf size 360287970189639696 failed, no address space
[  690.831678][T30638] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  690.851214][T26823] binder: release 30632:30639 transaction 3494 out, still active
19:55:36 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  690.865285][T30638] binder: 30635:30638 transaction failed 29201/-28, size 360287970189639680-0 line 3148
[  690.881163][T26823] binder: undelivered TRANSACTION_COMPLETE
[  690.972279][T30641] IPVS: ftp: loaded support on port[0] = 21
[  691.005770][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  691.019104][T30645] binder: 30644:30645 got transaction with unaligned buffers size, 12
[  691.023591][ T7967] binder: send failed reply for transaction 3494, target dead
[  691.032633][T30645] binder: 30644:30645 transaction failed 29201/-22, size 0-0 line 3211
[  691.044698][T30646] binder_alloc: 30635: binder_alloc_buf size 360287970189639696 failed, no address space
[  691.062825][T30646] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  691.075031][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  691.091817][T30647] binder: 30644:30647 got transaction with unaligned buffers size, 12
[  691.102981][T30646] binder: 30635:30646 transaction failed 29201/-28, size 360287970189639680-0 line 3148
19:55:37 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, &(0x7f0000003000), 0x11f4)
read$FUSE(r0, &(0x7f0000002000), 0x46d)
write$FUSE_INTERRUPT(r0, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x8c', 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000002c0))
r1 = gettid()
tkill(r1, 0x15)
read$FUSE(r0, &(0x7f0000000480), 0x1000)

[  691.131101][T30647] binder: 30644:30647 transaction failed 29201/-22, size 0-0 line 3211
[  691.163557][T26823] binder: undelivered TRANSACTION_ERROR: 29201
[  691.184531][T26823] binder: undelivered TRANSACTION_ERROR: 29201
19:55:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:37 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20000, 0x0)
ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000040)={0x7, 0x100000000, 0x4, 0x2})
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:37 executing program 1:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  691.410046][T30659] binder: 30656:30659 transaction failed 29189/-22, size 0-0 line 2995
[  691.410422][T30662] binder: 30657:30662 transaction failed 29201/-28, size 432345564227567616-0 line 3148
[  691.420716][T30661] IPVS: ftp: loaded support on port[0] = 21
[  691.487762][T30665] binder: 30656:30665 got transaction with unaligned buffers size, 12
[  691.496355][    T5] binder: undelivered TRANSACTION_ERROR: 29189
[  691.539866][T30665] binder: 30656:30665 transaction failed 29201/-22, size 0-0 line 3211
[  691.567879][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  691.580008][T30662] binder: BINDER_SET_CONTEXT_MGR already set
[  691.580057][T30668] binder: 30657:30668 transaction failed 29201/-28, size 432345564227567616-0 line 3148
[  691.628565][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  691.636434][T30662] binder: 30657:30662 ioctl 40046207 0 returned -16
19:55:37 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000100)="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")
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x0, @remote, 0x4e21, 0x1, 'nq\x00', 0x19, 0x5, 0x1c}, {@empty, 0x4e22, 0x10003, 0x9, 0x5, 0x7fffffff}}, 0x44)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="11634840000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000144999ff0cd8c12c5d89fda2c703fe49b4632cc303edef48d35c812da2ec02872654736846d6288c2d8aac16c2bb29396ace87907c607632cfdfef1f1afc6688551101f141e2ecd94090674051cee5115ccdbd430cdc762a9f55c4cadf896826be6614c998f95a2c51005f6a596516aa7205505e40a45bda7361c6b1cee063537942a5f86bf84a86683feda713c837acdbc03fb3a7a1106e2742a8bf49e03df0038083bfb04da1f71a18b7a634dfb35dc70c553d15af3ce43e970574ca7a21ef19c97b5ea3dafb43df084fe6e999db252b59d723c9342245985909b1324a6673fb8a0228085016b00348d1aacc94df189fbacdb3dafccc16ca3f6c3b50c6135df87c4691278da420ec5574fea7afbbac4f2997e017ae9a5d544a49076c13a16de21a0aa10f4267f091fa1c9ce5af6283d8d887b12f225fa6214450e3c4f0eaf2f86d7aa390bd0da42af9105aba4ab4dd44b62cccd68d2d52ade0e2064f21ca05cd9fac531997db18568684021f753975e37f4fd420e8e83a48d70dbc952387acd2ef7e7232d04c665617418f1b4c6cebf88b5a2dc06ebc2d0ccccaf7c5925f5d5de2c513244125c17adf12b792bdbde148d1050b6ac066ddc2c73f0d495f2354587da1c4308fcfce7c2b20f5565cd74d4e415aa33b88ca723d3b42f0f958e0f2b94bcf1cb91766b9220fbe4ae594196f03e4b4e91c775929608bcff44c0abce9de7a4c69514e7d8f036149e8bd98f3e2510574161a"], 0x0, 0x0, 0x0})

[  691.713320][    T5] binder: undelivered TRANSACTION_ERROR: 29201
19:55:37 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  691.819012][T30672] binder: 30671:30672 ioctl 41009432 20000100 returned -22
[  691.929664][T30672] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
[  691.993330][T30675] binder: 30671:30675 transaction failed 29189/-22, size 0-0 line 2995
[  692.035522][ T7967] binder: undelivered TRANSACTION_ERROR: 29201
[  692.043997][T30678] binder: BINDER_SET_CONTEXT_MGR already set
[  692.086580][T30678] binder: 30674:30678 ioctl 40046207 0 returned -16
[  692.098053][T30675] binder: 30671:30675 ioctl 41009432 20000100 returned -22
19:55:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

[  692.180091][T30681] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20001
19:55:38 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$sg(0x0, 0x0, 0x0)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x533, 0x400, 0x0, 0xffffffffffffffff})
ioctl(r2, 0x2285, &(0x7f0000007000)='S')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = eventfd(0x10001)
ioctl$KVM_IRQFD(r3, 0xae41, &(0x7f00000015c0)={r4, 0x0, 0x2, r4})

19:55:38 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000100)={0x8, 0x7, 0x6})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x10000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f00000001c0)={0xc9c, 0x80, 0x1, 'queue1\x00', 0x6})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})

[  692.442620][T30684] binder: BINDER_SET_CONTEXT_MGR already set
19:55:38 executing program 2:
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000280)={'filter\x00'}, &(0x7f0000000300)=0x54)

[  692.511132][T30684] binder: 30683:30684 ioctl 40046207 0 returned -16
19:55:38 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0}, 0xc}}], 0x0, 0x0, 0x0})

19:55:38 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000005b5e0000000000000000c8a0b20ea25b89020389000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000"], 0x0, 0x0, 0x0})

[  692.647016][T30695] IPVS: ftp: loaded support on port[0] = 21
[  692.826067][T30702] binder_alloc: 30696: binder_alloc_buf failed to map pages in userspace, no vma
[  855.913209][ T1042] INFO: task syz-executor.3:30655 blocked for more than 143 seconds.
[  855.921641][ T1042]       Not tainted 5.1.0-rc5 #68
[  855.927004][ T1042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  855.936493][ T1042] syz-executor.3  D29112 30655   7951 0x00000004
[  855.942928][ T1042] Call Trace:
[  855.946266][ T1042]  __schedule+0x813/0x1cc0
[  855.950790][ T1042]  ? __sched_text_start+0x8/0x8
[  855.955798][ T1042]  ? wait_woken+0x250/0x250
[  855.960330][ T1042]  schedule+0x92/0x180
[  855.964607][ T1042]  request_wait_answer+0x42f/0x7c0
[  855.969848][ T1042]  ? queue_interrupt+0x440/0x440
[  855.975070][ T1042]  ? finish_wait+0x260/0x260
[  855.979777][ T1042]  ? kasan_check_read+0x11/0x20
[  855.984773][ T1042]  ? do_raw_spin_unlock+0x57/0x270
[  855.989912][ T1042]  __fuse_request_send+0x12b/0x1d0
[  855.995268][ T1042]  fuse_request_send+0x60/0xa0
[  856.000076][ T1042]  fuse_simple_request+0x2f6/0x740
[  856.006073][ T1042]  fuse_setxattr+0x1fe/0x350
[  856.010681][ T1042]  ? no_xattr_set+0x10/0x10
[  856.015448][ T1042]  ? smk_access+0x40d/0x570
[  856.020081][ T1042]  ? kasan_slab_free+0xe/0x10
[  856.024935][ T1042]  ? kmem_cache_free+0x86/0x260
[  856.029834][ T1042]  ? smk_curacc+0xb7/0xe0
[  856.034309][ T1042]  fuse_xattr_set+0x3c/0x66
[  856.038866][ T1042]  ? fuse_removexattr+0x2f0/0x2f0
[  856.044324][ T1042]  __vfs_setxattr+0x121/0x190
[  856.049036][ T1042]  ? xattr_resolve_name+0x3e0/0x3e0
[  856.054594][ T1042]  ? evm_protect_xattr.isra.0+0x9e/0x3e0
[  856.060691][ T1042]  __vfs_setxattr_noperm+0x11c/0x410
[  856.067303][ T1042]  vfs_setxattr+0xda/0x100
[  856.071815][ T1042]  setxattr+0x26f/0x380
[  856.076801][ T1042]  ? vfs_setxattr+0x100/0x100
[  856.081851][ T1042]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  856.088599][ T1042]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  856.095394][ T1042]  ? rcu_read_lock_sched_held+0x110/0x130
[  856.102049][ T1042]  ? preempt_count_add+0xbc/0x1b0
[  856.107235][ T1042]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  856.113639][ T1042]  ? __mnt_want_write+0x1f1/0x2f0
[  856.118808][ T1042]  path_setxattr+0x197/0x1b0
[  856.123539][ T1042]  ? setxattr+0x380/0x380
[  856.128075][ T1042]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  856.135234][ T1042]  ? do_syscall_64+0x26/0x610
[  856.140163][ T1042]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  856.147810][ T1042]  ? do_syscall_64+0x26/0x610
[  856.153763][ T1042]  __x64_sys_lsetxattr+0xc1/0x150
[  856.158910][ T1042]  do_syscall_64+0x103/0x610
[  856.163750][ T1042]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  856.169838][ T1042] RIP: 0033:0x458c29
[  856.174041][ T1042] Code: cc 64 48 8b 0c 25 f8 ff ff ff 48 3b 61 10 0f 86 df 00 00 00 48 83 ec 30 48 89 6c 24 28 48 8d 6c 24 28 48 8b 42 08 48 8b 48 70 <48> 89 4c 24 20 48 8b 10 48 89 54 24 18 48 8b 40 08 48 89 44 24 10
[  856.195495][ T1042] RSP: 002b:00007fc9bdd9ac78 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  856.205050][ T1042] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458c29
[  856.213370][ T1042] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000140
[  856.221471][ T1042] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000
[  856.229638][ T1042] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc9bdd9b6d4
[  856.238276][ T1042] R13: 00000000004c4aa3 R14: 00000000004d8558 R15: 00000000ffffffff
[  856.246424][ T1042] 
[  856.246424][ T1042] Showing all locks held in the system:
[  856.254275][ T1042] 1 lock held by khungtaskd/1042:
[  856.259307][ T1042]  #0: 000000006a60a718 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e
[  856.268867][ T1042] 2 locks held by rsyslogd/7796:
[  856.273890][ T1042]  #0: 000000002a59a6d3 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  856.282525][ T1042]  #1: 000000004b21f955 (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1cc0
[  856.291626][ T1042] 2 locks held by getty/7907:
[  856.296681][ T1042]  #0: 000000000bd73a81 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.305882][ T1042]  #1: 000000001bf5be8f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.315686][ T1042] 2 locks held by getty/7908:
[  856.320790][ T1042]  #0: 0000000023fd5747 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.329908][ T1042]  #1: 0000000071d504bc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.339756][ T1042] 2 locks held by getty/7909:
[  856.345332][ T1042]  #0: 000000006ad548e2 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.354447][ T1042]  #1: 0000000098a1fc96 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.364093][ T1042] 2 locks held by getty/7910:
[  856.368783][ T1042]  #0: 0000000054619426 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.377938][ T1042]  #1: 000000009032ae84 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.387858][ T1042] 2 locks held by getty/7911:
[  856.392544][ T1042]  #0: 000000008fb4b3db (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.401733][ T1042]  #1: 00000000416cc727 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.411413][ T1042] 2 locks held by getty/7912:
[  856.416745][ T1042]  #0: 0000000090fe39c6 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.425789][ T1042]  #1: 0000000060a1143c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.435492][ T1042] 2 locks held by getty/7913:
[  856.440233][ T1042]  #0: 000000005412ab06 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  856.449375][ T1042]  #1: 0000000059419b03 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  856.459254][ T1042] 2 locks held by syz-executor.3/30655:
[  856.465261][ T1042]  #0: 000000002cd7e66a (sb_writers#23){.+.+}, at: mnt_want_write+0x3f/0xc0
[  856.474097][ T1042]  #1: 000000007da7f828 (&type->i_mutex_dir_key#8){++++}, at: vfs_setxattr+0x98/0x100
[  856.483848][ T1042] 
[  856.486189][ T1042] =============================================
[  856.486189][ T1042] 
[  856.495481][ T1042] NMI backtrace for cpu 1
[  856.499975][ T1042] CPU: 1 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc5 #68
[  856.507437][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  856.517607][ T1042] Call Trace:
[  856.520900][ T1042]  dump_stack+0x172/0x1f0
[  856.525376][ T1042]  nmi_cpu_backtrace.cold+0x63/0xa4
[  856.530770][ T1042]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  856.536414][ T1042]  nmi_trigger_cpumask_backtrace+0x1be/0x236
[  856.542592][ T1042]  arch_trigger_cpumask_backtrace+0x14/0x20
[  856.548552][ T1042]  watchdog+0x9b7/0xec0
[  856.552738][ T1042]  kthread+0x357/0x430
[  856.556858][ T1042]  ? reset_hung_task_detector+0x30/0x30
[  856.562416][ T1042]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  856.568676][ T1042]  ret_from_fork+0x3a/0x50
[  856.573274][ T1042] Sending NMI from CPU 1 to CPUs 0:
[  856.578629][    C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x2/0x10
[  856.579500][ T1042] Kernel panic - not syncing: hung_task: blocked tasks
[  856.593846][ T1042] CPU: 1 PID: 1042 Comm: khungtaskd Not tainted 5.1.0-rc5 #68
[  856.601418][ T1042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  856.611481][ T1042] Call Trace:
[  856.614780][ T1042]  dump_stack+0x172/0x1f0
[  856.619260][ T1042]  panic+0x2cb/0x65c
[  856.623158][ T1042]  ? __warn_printk+0xf3/0xf3
[  856.627871][ T1042]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[  856.633741][ T1042]  ? printk_safe_flush+0xf2/0x140
[  856.638873][ T1042]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  856.645128][ T1042]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  856.650771][ T1042]  ? nmi_trigger_cpumask_backtrace+0x1a7/0x236
[  856.657158][ T1042]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  856.663779][ T1042]  watchdog+0x9c8/0xec0
[  856.668090][ T1042]  kthread+0x357/0x430
[  856.672252][ T1042]  ? reset_hung_task_detector+0x30/0x30
[  856.677861][ T1042]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  856.684554][ T1042]  ret_from_fork+0x3a/0x50
[  856.690475][ T1042] Kernel Offset: disabled
[  856.695059][ T1042] Rebooting in 86400 seconds..