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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000000)={0xffffffffffff6381, 0xaac4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1258.124825] binder: 438:440 ioctl c0306201 20000040 returned -14
19:41:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000005000080"], 0x0, 0x0, 0x0})

[ 1258.166655] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1258.179231] binder: undelivered TRANSACTION_ERROR: 29201
19:41:16 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
socket$inet_dccp(0x2, 0x6, 0x0)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x80, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f00000001c0)={0x0, {0x3, 0x1f}})
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x3f000000, 0x0, 0x0})

[ 1258.245706] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1258.256068] binder_alloc: 10471: binder_alloc_buf size 549755815168 failed, no address space
[ 1258.319285] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1258.344262] binder: 455:458 transaction failed 29201/-28, size 0-549755815168 line 3035
[ 1258.344269] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000260100000072d907000f510007140028", 0x22)

19:41:16 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000440)='/dev/admmidi#\x00', 0x8, 0x10000)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000480)={0x0, @reserved})
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = request_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000380)='\x00', 0xfffffffffffffffa)
keyctl$invalidate(0x15, r3)
link(&(0x7f0000000640)='./file0\x00', &(0x7f0000000600)='./file0/file0\x00')
syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x80000000, 0x8000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1258.344285] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1258.367203] binder: undelivered TRANSACTION_ERROR: 29201
19:41:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000270100000072d907000f510007140028", 0x22)

19:41:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1258.480780] binder_alloc: 10471: binder_alloc_buf size 549755815168 failed, no address space
[ 1258.489902] binder: 463:464 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1258.516788] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:16 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

[ 1258.531781] binder: 463:464 ioctl c0306201 20000040 returned -14
[ 1258.558470] binder: undelivered TRANSACTION_ERROR: 29201
[ 1258.571360] binder: 455:458 transaction failed 29201/-28, size 0-549755815168 line 3035
19:41:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x48000000, 0x0, 0x0})

19:41:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000280100000072d907000f510007140028", 0x22)

19:41:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000006000080"], 0x0, 0x0, 0x0})

[ 1258.662334] binder: undelivered TRANSACTION_ERROR: 29201
19:41:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1258.772547] binder_alloc: 10471: binder_alloc_buf size 549755815424 failed, no address space
19:41:16 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x80200, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000380)={0x8001, 0x0, @name="77af8116a6151a453f3d00afc25891556b4d9861f993a31368c7507e725dc95b"})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xb2080000000, 0x84080)
ioctl$RTC_AIE_ON(r3, 0x7001)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000600)='./file0\x00', 0x25)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f00000004c0)=@buf={0x99, &(0x7f0000000640)="e4e24d93e0b20270ae32f8bca5bb2b22b5cff1a9492ac8d326813e7be2e3fb377c8395cd4ebf36afc68eccb933fa34c610f3d2b5cb770c309ee54cf9cb9624f73da089f7df39776bf57158d29fe52a32ee69b785412951c66ee7c340435c7ea8a7f7d5899962bb4c8f8c6b08c0472fea3c4173472418857e0aa28ada2611e760685ea78c4d0009eb85294a00884f760616d64652086440c318"})
lsetxattr$trusted_overlay_nlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f0000000580)={'L+', 0xfff}, 0x28, 0x1)

19:41:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000290100000072d907000f510007140028", 0x22)

19:41:16 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x3ba41e5394e4287e, 0x0)
ioctl$RTC_PLL_SET(r1, 0x401c7012, &(0x7f0000000080)={0xffffffffffffff55, 0x80, 0x200, 0x2, 0x20, 0x80000000, 0x8f})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1258.817152] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1258.849224] binder: 500:502 transaction failed 29201/-28, size 0-549755815424 line 3035
[ 1258.857480] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1258.888660] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1258.910879] binder: undelivered TRANSACTION_ERROR: 29201
[ 1258.922514] binder: 503:504 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000007000080"], 0x0, 0x0, 0x0})

[ 1258.979508] binder: 503:504 ioctl c0306201 20000040 returned -14
19:41:17 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002a0100000072d907000f510007140028", 0x22)

19:41:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1259.027636] binder: undelivered TRANSACTION_ERROR: 29201
[ 1259.050711] binder_alloc: 10471: binder_alloc_buf size 549755815680 failed, no address space
19:41:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x4c000000, 0x0, 0x0})

[ 1259.110348] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1259.129361] binder: 528:529 transaction failed 29201/-28, size 0-549755815680 line 3035
19:41:17 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5, 0x800)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.stat\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000340)={{0x4, 0x400}, {0x2, 0x200}, 0xfffffffffffff802, 0x2, 0x4})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$TIOCSTI(r2, 0x5412, 0x6)
r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xbdaf, 0x0)
ioctl$BLKTRACESTOP(r3, 0x1275, 0x0)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000280)={0x0, @dev, @loopback}, &(0x7f00000002c0)=0xc)
prctl$PR_SVE_SET_VL(0x32, 0x20d60)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8)
ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000003c0))
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x0, r4, 0x38}, 0x10)

[ 1259.195762] binder: 528:529 transaction failed 29201/-28, size 0-549755815680 line 3035
[ 1259.198407] binder: undelivered TRANSACTION_ERROR: 29201
19:41:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002b0100000072d907000f510007140028", 0x22)

[ 1259.250984] binder: undelivered TRANSACTION_ERROR: 29201
[ 1259.259493] binder: 542:545 ioctl c0306201 20000040 returned -14
19:41:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000012000080"], 0x0, 0x0, 0x0})

19:41:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x60000000, 0x0, 0x0})

19:41:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002c0100000072d907000f510007140028", 0x22)

19:41:17 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00'})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000500)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', r1})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000180)={{0x7f, 0x6}, {0x80, 0x2}, 0x7fffffff, 0x3, 0x5})
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prctl$PR_GET_TIMERSLACK(0x1e)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x101, 0x900)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000020000080"], 0x0, 0x0, 0x0})

[ 1259.544305] binder: 576:577 ioctl c0306201 20000040 returned -14
19:41:17 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', r1})
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000480)={0xffffffff00000000, 0x6e4a, 0x1, 0x401, 0x5, [{0x0, 0x1, 0x3f, 0x0, 0x0, 0x200}, {0x8df, 0x1, 0x1f, 0x0, 0x0, 0x2000}, {0xff, 0x8, 0x4, 0x0, 0x0, 0x2}, {0xe7, 0x4, 0x0, 0x0, 0x0, 0x200}, {0x5, 0x7, 0xdf, 0x0, 0x0, 0x80}]})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x1)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x68000000, 0x0, 0x0})

19:41:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002d0100000072d907000f510007140028", 0x22)

19:41:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000080"], 0x0, 0x0, 0x0})

19:41:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1259.741746] binder: 595:596 ioctl c0306201 20000040 returned -14
19:41:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:17 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000600)="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", 0x1b7, 0x40, 0x0, 0x17e)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
poll(&(0x7f0000000180)=[{r2, 0xc000}, {r1, 0x420}, {r1, 0x2000}, {r2, 0x4025}, {r3, 0x80}], 0x5, 0xdc5)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000380)={<r4=>0xffffffffffffffff}, 0x106, 0x100b}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000400)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r4}}, 0x18)

19:41:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002e0100000072d907000f510007140028", 0x22)

19:41:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x6c000000, 0x0, 0x0})

19:41:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000040000080"], 0x0, 0x0, 0x0})

[ 1259.976569] binder: 619:620 ioctl c0306201 20000040 returned -14
19:41:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300002f0100000072d907000f510007140028", 0x22)

19:41:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
nanosleep(&(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000080))
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x74000000, 0x0, 0x0})

19:41:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000002f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000300100000072d907000f510007140028", 0x22)

[ 1260.169607] binder: 636:637 ioctl c0306201 20000040 returned -14
19:41:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000048000080"], 0x0, 0x0, 0x0})

19:41:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x7a000000, 0x0, 0x0})

[ 1260.333626] binder: 650:651 ioctl c0306201 20000040 returned -14
19:41:18 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
r2 = getpid()
setpgid(r2, r2)
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)={0x1d0, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER={0x138, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4b, @empty, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbaf, @empty, 0x5663}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @rand_addr=0x1ff}, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffff1d81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd4e8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4040050}, 0x8000)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
dup3(r2, r0, 0x80000)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000012f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000310100000072d907000f510007140028", 0x22)

19:41:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000080"], 0x0, 0x0, 0x0})

19:41:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0xfdfdffff, 0x0, 0x0})

19:41:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000060000080"], 0x0, 0x0, 0x0})

19:41:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000320100000072d907000f510007140028", 0x22)

[ 1260.810552] binder: 669:670 ioctl c0306201 20000040 returned -14
[ 1260.849730] binder: 669:670 ioctl c0306201 20000040 returned -14
19:41:18 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0xfffffdfd, 0x0, 0x0})

19:41:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000030000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffff9)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x140, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r3, 0x0, 0x1, 0x7fff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20)
socket$rds(0x15, 0x5, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$USERIO_CMD_REGISTER(r3, &(0x7f0000000100)={0x0, 0x4}, 0x2)

19:41:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000330100000072d907000f510007140028", 0x22)

19:41:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000068000080"], 0x0, 0x0, 0x0})

[ 1261.051398] binder: 688:689 ioctl c0306201 20000040 returned -14
19:41:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000130000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x8000000000, 0x0, 0x0})

19:41:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000006c000080"], 0x0, 0x0, 0x0})

19:41:19 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sync_file_range(r2, 0x3, 0x3f, 0x2)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000340100000072d907000f510007140028", 0x22)

19:41:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2071bbd9b32849f9, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4008641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x4]})

19:41:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000031000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1261.351502] binder: 717:719 ioctl c0306201 20000040 returned -14
19:41:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000074000080"], 0x0, 0x0, 0x0})

19:41:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000350100000072d907000f510007140028", 0x22)

19:41:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x100000000000000, 0x0, 0x0})

19:41:19 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000131000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000360100000072d907000f510007140028", 0x22)

19:41:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000007a000080"], 0x0, 0x0, 0x0})

[ 1261.565441] binder: 739:740 ioctl c0306201 20000040 returned -14
19:41:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x19)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='vmnet0\'\x00', 0xfffffffffffffffd)
r3 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="5461b7dae196a407973010f70378df23aec027c4b49bcff313071e0612df7910a16d57d01837d44e61f80e9064e3711f6b44b03b900b75874ad73ff4f4dc85be14fc0070bed58df959fc44049f38cb8bc47dac2166c74cee", 0x58, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000001040)="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", 0xfe98, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x200000000000000, 0x0, 0x0})

19:41:19 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r2)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d3)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd000080"], 0x0, 0x0, 0x0})

19:41:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000370100000072d907000f510007140028", 0x22)

19:41:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000032000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1261.797890] binder: 764:765 ioctl c0306201 20000040 returned -14
19:41:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x181a80, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={<r4=>0x0})
ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000100)={r4})
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000080))
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getresuid(&(0x7f0000000140), &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280))
ioctl$TUNSETOWNER(r3, 0x400454cc, r5)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f00000000c0)='\\system\x00')
arch_prctl$ARCH_SET_GS(0x1001, 0x1ff)

19:41:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x300000000000000, 0x0, 0x0})

19:41:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000132000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff000080"], 0x0, 0x0, 0x0})

19:41:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000380100000072d907000f510007140028", 0x22)

19:41:20 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0xc0, 0x0)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000180)=0x8)

[ 1262.023919] binder: 785:788 ioctl c0306201 20000040 returned -14
19:41:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000020000000080"], 0x0, 0x0, 0x0})

19:41:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x400000000000000, 0x0, 0x0})

19:41:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000033000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000390100000072d907000f510007140028", 0x22)

19:41:20 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
r2 = getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000180)=r2)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000030000000080"], 0x0, 0x0, 0x0})

[ 1262.220844] binder: 807:809 ioctl c0306201 20000040 returned -14
[ 1262.230850] binder: 807:809 ioctl c0306201 20000040 returned -14
[ 1262.299555] __nla_parse: 60 callbacks suppressed
[ 1262.299566] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ftruncate(r2, 0x6)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000133000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x500000000000000, 0x0, 0x0})

19:41:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003a0100000072d907000f510007140028", 0x22)

[ 1262.412974] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1262.422423] binder: 828:829 ioctl c0306201 20000040 returned -14
19:41:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000040000000080"], 0x0, 0x0, 0x0})

19:41:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x600000000000000, 0x0, 0x0})

19:41:20 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

[ 1262.471934] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1262.540227] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000034000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003b0100000072d907000f510007140028", 0x22)

[ 1262.587057] binder_alloc_new_buf_locked: 34 callbacks suppressed
[ 1262.587067] binder_alloc: 10471: binder_alloc_buf size 288230925907525632 failed, no address space
[ 1262.617200] binder_alloc_new_buf_locked: 34 callbacks suppressed
[ 1262.617215] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1262.660514] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1262.661577] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1262.694566] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:20 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

[ 1262.729407] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1262.729615] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1262.745763] binder_alloc: 10471: binder_alloc_buf size 288230925907525632 failed, no address space
19:41:20 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x4000, 0x2000, 0xc, 0x80000000, 0x894, 0x4, 0x648, 0x3, 0x1, 0x5, 0x0, 0x2}, {0x0, 0x6000, 0xf, 0x7f, 0x6, 0x98e2, 0x1, 0x1, 0x4, 0x0, 0x0, 0x10001}, {0x5004, 0x3000, 0xd, 0x85, 0x4, 0x7, 0x8f8, 0x5, 0xfffffffffffff457, 0x1, 0x7, 0x9}, {0x4, 0x5000, 0xf, 0x4, 0x3, 0x807, 0xfffffffffffffff7, 0x2, 0x20, 0xc50, 0x0, 0x1}, {0x0, 0x10f000, 0xb, 0x6, 0xc4, 0x5, 0x5, 0x80, 0x8000, 0x5, 0x1f, 0x9085}, {0xd000, 0x2, 0xe, 0x7f, 0x100000000, 0x2, 0x1, 0x8, 0x3, 0xff, 0x1ff, 0x3}, {0xf000, 0x102005, 0x8, 0x1ff, 0x3, 0xffffffff, 0x5, 0x3, 0x0, 0x200, 0x80000000, 0x10001}, {0x7000, 0x3000, 0x3, 0x8, 0x7, 0x401, 0x6, 0x2, 0x3, 0x400, 0xfffffffffffffffa, 0xa543}, {0x100000, 0x3002}, {0x1000, 0x4}, 0x6, 0x0, 0x3000, 0x0, 0x3, 0x1000, 0xf000, [0x9, 0xa87, 0x2, 0x825d]})
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x4e20, 0xfffffffffffffff8, @local, 0x3}}}, 0x84)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = semget(0x2, 0x1, 0x8)
semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000001040)=""/4096)

[ 1262.777963] binder_transaction: 34 callbacks suppressed
[ 1262.777978] binder: 847:848 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1262.782510] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1262.819503] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1262.828952] binder: 847:848 ioctl c0306201 20000040 returned -14
19:41:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000134000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003c0100000072d907000f510007140028", 0x22)

[ 1262.858621] binder: 840:843 transaction failed 29201/-28, size 288230376151711744-549755813888 line 3035
[ 1262.876159] binder_release_work: 34 callbacks suppressed
[ 1262.876164] binder: undelivered TRANSACTION_ERROR: 29201
[ 1262.898966] binder: undelivered TRANSACTION_ERROR: 29201
19:41:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x700000000000000, 0x0, 0x0})

19:41:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000050000000080"], 0x0, 0x0, 0x0})

[ 1262.972882] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:21 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
recvmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000001780)=[{&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000001580)=""/132, 0x84}, {&(0x7f0000001640)=""/174, 0xae}, {&(0x7f0000001700)=""/40, 0x28}, {&(0x7f0000001740)=""/43, 0x2b}], 0x8, &(0x7f00000017c0)=""/90, 0x5a}}], 0x1, 0x40000040, &(0x7f0000001880)={0x0, 0x1c9c380})
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

[ 1263.034099] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1263.043002] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000035000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003d0100000072d907000f510007140028", 0x22)

[ 1263.096484] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1263.125626] binder_alloc: 10471: binder_alloc_buf size 360288519945453568 failed, no address space
19:41:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x369080, 0x0)
ioctl$PPPIOCSPASS(r3, 0x40087447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8000, 0xfffffffffffffff9, 0x5, 0x2}, {0x2, 0x3, 0x10001, 0x6}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1263.169308] binder: 874:875 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1263.199020] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1263.208531] binder: 874:875 ioctl c0306201 20000040 returned -14
[ 1263.229350] binder: 877:878 transaction failed 29201/-28, size 360287970189639680-549755813888 line 3035
[ 1263.253232] binder: undelivered TRANSACTION_ERROR: 29201
19:41:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003e0100000072d907000f510007140028", 0x22)

19:41:21 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@initdev}}, &(0x7f00000001c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000600)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4}, 0x0, @in=@loopback}}, &(0x7f0000000780)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000640)={'vcan0\x00', r1})
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x6000, 0x0)
ioctl$TIOCNXCL(r3, 0x540d)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0x22058ea5fd61ff5)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

[ 1263.278224] binder: undelivered TRANSACTION_ERROR: 29201
19:41:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000135000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0xa00000000000000, 0x0, 0x0})

19:41:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000060000000080"], 0x0, 0x0, 0x0})

19:41:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300003f0100000072d907000f510007140028", 0x22)

19:41:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000036000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1263.427027] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1263.496012] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:21 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f00000001c0)={0x6, 0xf4})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
accept4(r1, &(0x7f0000000480)=@ipx, &(0x7f0000000500)=0x80, 0x800)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
setsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000540)=0x1, 0x4)
close(r2)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000440)={&(0x7f0000000380)=""/181, 0x4000, 0x800, 0x2}, 0x18)

19:41:21 executing program 2:
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1263.542114] binder: 906:907 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1263.544693] binder_alloc: 10471: binder_alloc_buf size 432346113983381504 failed, no address space
[ 1263.571842] binder: 906:907 ioctl c0306201 20000040 returned -14
19:41:21 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x1200000000000000, 0x0, 0x0})

19:41:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000400100000072d907000f510007140028", 0x22)

[ 1263.624808] binder: undelivered TRANSACTION_ERROR: 29201
[ 1263.658655] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000136000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:21 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf2, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
r2 = getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/user\x00')
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
sendto$inet6(r3, &(0x7f00000001c0)="8bea73687828f42f2086f4d8c752c01b0fa28a22fee7e315f87272260bff", 0x1e, 0x4c080, 0x0, 0x0)
getrlimit(0xa, &(0x7f0000000380))
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

[ 1263.697312] binder: 909:912 transaction failed 29201/-28, size 432345564227567616-549755813888 line 3035
[ 1263.723263] binder: undelivered TRANSACTION_ERROR: 29201
19:41:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000410100000072d907000f510007140028", 0x22)

19:41:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000070000000080"], 0x0, 0x0, 0x0})

[ 1263.779500] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1263.819373] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:21 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x501)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='\xa6gV#S\t\xfd\x88\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001040)=ANY=[@ANYRES32=<r4=>0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x1008)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r4, 0x8}, 0x8)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x80400, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x1010, r5, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

19:41:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000037000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1263.899908] binder: 931:932 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1263.900021] binder_alloc: 10471: binder_alloc_buf size 504403708021309440 failed, no address space
19:41:21 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000380)={0x31, 0x8, 0x0, 0xccf, 0x7, [{0x5, 0x4, 0x3f, 0x0, 0x0, 0x200}, {0x3, 0x8, 0x3}, {0x80, 0x5, 0x6, 0x0, 0x0, 0x80}, {0xfffffffffffffffb, 0x1, 0x1, 0x0, 0x0, 0x8}, {0x43d0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8}, {0x9, 0x3, 0x6, 0x0, 0x0, 0x400}, {0x8, 0x7, 0x6, 0x0, 0x0, 0x200}]})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000420100000072d907000f510007140028", 0x22)

[ 1263.959032] binder: 931:932 ioctl c0306201 20000040 returned -14
[ 1263.986958] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1264.012328] binder: undelivered TRANSACTION_ERROR: 29201
[ 1264.043857] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1264.053237] binder: 945:946 transaction failed 29201/-28, size 504403158265495552-549755813888 line 3035
19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000137000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1264.082315] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1264.104558] binder: undelivered TRANSACTION_ERROR: 29201
19:41:22 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000005c0)=0x800, 0x562f6b6684cd42c7)
setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000480)={0x0, 0xfb, 0xb6, 0x1, 0x8, "1c2439dce2f8f90d05745a8be33d1a80", "1ed60c862975172cfe635c1d421d6dfd4c49eca9404466c4a14f3b6fcc2f4d262179ec30660f7400da513660d1e50a1c2a97acc00d696da5afe55c011c8ade1922dcccc30721bba9e2ded471c085f9e772e4eed95e6c74da2e482eab00d6b4b5c71ea03b4516a6dbe12ee2e4d1ff7f0ada1b1705c85aca53d8e26e861ff011c22b3c7673e9dd2f601cd45394d616b707877e2d425f2bf9a3bb6697e8e2353fd3c4"}, 0xb6, 0x1)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
r3 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f00000001c0)={0xf000, 0x15000})
ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000540)=0xfffffffffffff244)
fstat(r0, &(0x7f0000000380))
close(r1)

[ 1264.139762] binder: 931:932 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1264.203472] binder: 931:932 ioctl c0306201 20000040 returned -14
[ 1264.222857] binder: undelivered TRANSACTION_ERROR: 29201
19:41:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x2000000000000000, 0x0, 0x0})

19:41:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000120000000080"], 0x0, 0x0, 0x0})

19:41:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000430100000072d907000f510007140028", 0x22)

19:41:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000038000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:22 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
fcntl$getownex(r0, 0x10, &(0x7f00000003c0)={0x0, <r1=>0x0})
sched_rr_get_interval(r1, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
r3 = dup3(r0, r2, 0x80000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{<r4=>0x0}, {}]})
ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000380)={r4, 0x2})
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000180)=0x8, 0x1)
close(r2)

[ 1264.341030] binder: 976:978 transaction failed 29201/-28, size 1297036692682702848-549755813888 line 3035
19:41:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000440100000072d907000f510007140028", 0x22)

19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000138000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1264.387024] binder: 986:989 ioctl c0306201 20000040 returned -14
[ 1264.410373] binder: undelivered TRANSACTION_ERROR: 29201
19:41:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000480000000080"], 0x0, 0x0, 0x0})

19:41:22 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, [0x4, 0x8000000000005, 0x0, 0x4]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:22 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r1, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x200000000000040, 0x0, 0x0)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4000, 0x0)
ustat(0xf, &(0x7f0000000540))
ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000440)={'broute\x00', 0x0, 0x3, 0x13, [], 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/19}, &(0x7f00000004c0)=0x50)
ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000580)="0518305a808fb3e5032448ec5bf2eff222b258b21aee46c66392336f3aed280bfe0986693dd3dae934158c2bc6eed13fc25a1ff9b3efe910f50177713044e4822e076ef2f3042d7d8cba89e8564f49a56daadae8ccfcef104bceac1d8145018c1ac4281e8040e5e505a5b237f4ea0588f93726e0be1f4d161411b18869c18b953528489947b62a2cd8df47e138b8f62808816390e9a74bef88ed2be9c44bc96e5955cf8232ae71e67cb5bab04208054f15765eff44aeacfc4819535f0ecebd0242fc43dacad53a684dfc619aa8cddc8eff7c246c68bbe70f03c8d109d48f42b7607e3cd3e02f167fdf9609146e986646681d03dae076d6ea241cf45fb4790ebb")
r4 = creat(&(0x7f0000000680)='./file0\x00', 0x200000000001d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vcs\x00', 0x0, 0x0)
close(r1)
io_setup(0x20, &(0x7f00000001c0)=<r5=>0x0)
io_destroy(r5)

19:41:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x3f00000000000000, 0x0, 0x0})

19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000039000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000450100000072d907000f510007140028", 0x22)

19:41:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000004c0000000080"], 0x0, 0x0, 0x0})

[ 1264.657477] binder: 1007:1016 ioctl c0306201 20000040 returned -14
19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000139000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:22 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x4800000000000000, 0x0, 0x0})

19:41:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000460100000072d907000f510007140028", 0x22)

19:41:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000600000000080"], 0x0, 0x0, 0x0})

19:41:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:22 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)

[ 1264.828683] binder: 1029:1032 ioctl c0306201 20000040 returned -14
19:41:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x7d, 0x0, [0x0, 0x0, 0x2000]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x4c00000000000000, 0x0, 0x0})

19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000680000000080"], 0x0, 0x0, 0x0})

19:41:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000470100000072d907000f510007140028", 0x22)

19:41:23 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000180)=0x30, 0x4)

[ 1265.044092] binder: 1060:1062 ioctl c0306201 20000040 returned -14
19:41:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000006c0000000080"], 0x0, 0x0, 0x0})

19:41:23 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
write$P9_RSTATFS(r2, &(0x7f0000000180)={0x43, 0x9, 0x2, {0x2, 0x40, 0xcd, 0x6, 0x1, 0xf952, 0x800000, 0x8001, 0x195}}, 0x43)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
close(r1)

19:41:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x6000000000000000, 0x0, 0x0})

19:41:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000480100000072d907000f510007140028", 0x22)

[ 1265.276404] binder: 1083:1088 ioctl c0306201 20000040 returned -14
19:41:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0)=""/47)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200))
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0x4, 0xffffffffffffffff, 0x7ff, 0x101]})
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)=0x1, 0x4)

19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000740000000080"], 0x0, 0x0, 0x0})

19:41:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x6800000000000000, 0x0, 0x0})

19:41:23 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x40000, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000001c0)={0x7, 0x40, 0x4a0, 0x3ff}, 0x10)
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000500)={0x6, 0x1, @raw_data=[0x8001, 0x0, 0xfffffffffffffffb, 0x37d9, 0x1, 0x7, 0x1f, 0x3fb, 0x7fffffff, 0x7, 0xfffffffffffffff7, 0x7f, 0x3, 0x44f8, 0x6, 0xffffffffffff8001]})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20\x00', 0x800, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
sendmsg$key(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0218cb0f130000002bbd7000fcdbdf250800120001000300c06b6e000100010006007f003efa0000160e000000000000ac1414bb000000000000000000000000ff02000000001000010000000000000109001800ff003c00b1fe4ee54842f8a48af4705993592a1aa1a77b91482879a666d20803f9b5b9853ec83e4eac600fb3ab5405b3fef6b3819bdb28d18208c7c9afd5ca7e00000000"], 0x98}}, 0x40)
close(r1)

19:41:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000490100000072d907000f510007140028", 0x22)

[ 1265.501578] binder: 1105:1106 ioctl c0306201 20000040 returned -14
19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000007a0000000080"], 0x0, 0x0, 0x0})

[ 1265.553534] binder: 1105:1106 ioctl c0306201 20000040 returned -14
19:41:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x6c00000000000000, 0x0, 0x0})

19:41:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:23 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
write$vhci(r4, &(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
close(r1)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000180))

19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000300000080"], 0x0, 0x0, 0x0})

19:41:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004a0100000072d907000f510007140028", 0x22)

19:41:23 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4001, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x3, 0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x1, 0x1000, 0x6, 0x0, 0xfffffffffffffffb}, 0x14)

[ 1265.708696] binder: 1126:1129 ioctl c0306201 20000040 returned -14
19:41:23 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@loopback, @in=@remote}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', r1})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40)='TIPCv2\x00')
r3 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8001, 0x200000)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000b00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000780)=ANY=[@ANYBLOB="28030000", @ANYRES16=r4, @ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:23 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x7400000000000000, 0x0, 0x0})

19:41:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000500000080"], 0x0, 0x0, 0x0})

19:41:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004b0100000072d907000f510007140028", 0x22)

[ 1265.937495] binder: 1152:1153 ioctl c0306201 20000040 returned -14
19:41:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x7a00000000000000, 0x0, 0x0})

19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x200000, 0x0)
ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000380)={0xa, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r1, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00')
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000600000080"], 0x0, 0x0, 0x0})

19:41:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004c0100000072d907000f510007140028", 0x22)

[ 1266.127307] binder: 1179:1180 ioctl c0306201 20000040 returned -14
19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000080)={<r1=>0x0, 0x3, 0x18, 0x2, 0x4, 0x1, 0x1, 0x4, {<r2=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0x9, 0x0, 0xa0f7, 0x0, 0xfff}}, &(0x7f0000000140)=0xb0)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r2, 0xe1a}, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r4, 0x4068aea3, &(0x7f0000000180)={0x79})
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000240)={0x5, {0x100000001, 0xfffffffffffffff7, 0x6a24, 0x200}})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x4, 0x2, 0x4, 0x4c}, 0x98)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r5, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

19:41:24 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
getsockopt$sock_int(r2, 0x1, 0x3f, &(0x7f0000000180), &(0x7f00000001c0)=0x4)

19:41:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0xfdfdffff00000000, 0x0, 0x0})

19:41:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000700000080"], 0x0, 0x0, 0x0})

19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004d0100000072d907000f510007140028", 0x22)

[ 1266.454073] binder: 1200:1201 ioctl c0306201 20000040 returned -14
19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000001200000080"], 0x0, 0x0, 0x0})

19:41:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004e0100000072d907000f510007140028", 0x22)

19:41:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x2, 0x0})

19:41:24 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
fcntl$addseals(r1, 0x409, 0x0)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
recvfrom$rxrpc(r2, &(0x7f0000000380)=""/157, 0x9d, 0x2040, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300004f0100000072d907000f510007140028", 0x22)

19:41:24 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x3, 0x0})

19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000003f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000002000000080"], 0x0, 0x0, 0x0})

19:41:24 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=<r2=>0x0, @ANYBLOB="6d0000008cf0f9d9f503c65b4253329b048bcf92451d6ace82606139c75b38ced0c20422c0b718a687716ab410612ab09805cd5620e3eda36b10b2fa75a92232fcbca95bbde9f61f07e744a1f238d3ab91fbb5ecfe1461c240ac74681eb18576cf9d12c1730e2a8fb36ee20a5ff65e74ef"], &(0x7f0000000480)=0x75)
pipe(&(0x7f0000000540)={<r3=>0xffffffffffffffff})
getsockopt$inet_int(r3, 0x0, 0xe, &(0x7f0000000580), &(0x7f00000005c0)=0x4)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r2, 0x7fffffff, 0x5, 0x251}, &(0x7f0000000500)=0x10)
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
uname(&(0x7f0000000380)=""/224)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
getuid()
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000040)=0x100, 0x4)
close(r1)

19:41:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000003f00000080"], 0x0, 0x0, 0x0})

19:41:24 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4, 0x0})

19:41:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000013f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:24 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
bind$rds(r2, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={<r3=>0x0, 0xfffffffffffffffe}, &(0x7f0000000380)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f00000003c0)={r3, 0x100000000}, 0x8)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000500100000072d907000f510007140028", 0x22)

19:41:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000040000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000004000000080"], 0x0, 0x0, 0x0})

19:41:25 executing program 2:
r0 = socket(0x96a60f66903d06f6, 0x1, 0x6)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendto$rxrpc(r0, &(0x7f00000000c0)="9cf8019e3268673516f65fee99623db155e64fff0d8b4638fc196b1b63b980a9926f965a21de42d5246ab6b8e48beb20887aca8508b4f70e8d9c5910a712ce15c962a0cd1c6e30f9d644e7a80455e69b740406d01e9d18e44425e2be0ebd65f8eaeba791516996c98520cac767ba0595d33212030f1eadb644c8c0f5dd", 0x7d, 0x4008080, &(0x7f0000000140)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @rand_addr="1536706ef9a57665cd721e9f6000b463", 0x3}}, 0x24)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x75})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x5, 0x0})

19:41:25 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0x337, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000510100000072d907000f510007140028", 0x22)

19:41:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000140000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6, 0x0})

19:41:25 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, <r1=>0x0}, &(0x7f00000003c0)=0xc)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000005c0)=0xe8)
stat(&(0x7f0000000600)='./file1\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getgroups(0x7, &(0x7f0000000740)=[0xee00, <r6=>0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee00, 0xffffffffffffffff])
stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = getgid()
lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = getgid()
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x6}, [{0x2, 0x5, r1}, {0x2, 0x0, r2}, {0x2, 0x4, r3}, {0x2, 0x2, r4}], {0x4, 0x4}, [{0x8, 0x1, r5}, {0x8, 0x6, r6}, {0x8, 0x2, r7}, {0x8, 0x0, r8}, {0x8, 0x1, r9}, {0x8, 0x2, r10}, {0x8, 0x4, r11}], {0x10, 0x1}, {0x20, 0x4}}, 0x7c, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r12 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r13 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r13, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r12, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r12)

19:41:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000004800000080"], 0x0, 0x0, 0x0})

19:41:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000520100000072d907000f510007140028", 0x22)

[ 1267.361546] __nla_parse: 69 callbacks suppressed
[ 1267.361554] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7, 0x0})

19:41:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1267.451015] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1267.487691] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000080"], 0x0, 0x0, 0x0})

19:41:25 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x5, 0x220000)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000001c0)={0x6, 0x3})
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xa, 0x0})

19:41:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000530100000072d907000f510007140028", 0x22)

19:41:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000041000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1267.637300] binder_alloc_new_buf_locked: 38 callbacks suppressed
[ 1267.637311] binder_alloc: 10471: binder_alloc_buf size 549755813968 failed, no address space
[ 1267.661344] binder_alloc_new_buf_locked: 38 callbacks suppressed
[ 1267.661375] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1267.672690] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1267.686939] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1267.689546] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1267.719130] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:25 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x12, 0x0})

19:41:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000540100000072d907000f510007140028", 0x22)

19:41:25 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1267.766936] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006000000080"], 0x0, 0x0, 0x0})

19:41:25 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x7fffc)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000141000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1267.885711] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1267.888490] binder_alloc: 10471: binder_alloc_buf size 549755813984 failed, no address space
19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000550100000072d907000f510007140028", 0x22)

[ 1267.989950] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1268.000088] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1268.030691] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1268.038991] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1268.039899] binder_transaction: 39 callbacks suppressed
[ 1268.039916] binder: 1351:1352 transaction failed 29201/-28, size 0-549755813984 line 3035
[ 1268.065573] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:26 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4a0400, 0x100)
mknodat(r2, &(0x7f0000000480)='./file0\x00', 0x80, 0x1)
getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000380)={{{@in=@broadcast}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000004c0)={<r5=>0x0, 0x100000000}, &(0x7f0000000500)=0x8)
write$UHID_GET_REPORT_REPLY(r4, &(0x7f00000005c0)={0xa, 0x8, 0x3, 0x7}, 0xa)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000540)={r5, 0xd9}, &(0x7f0000000580)=0x8)
close(r1)

19:41:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000042000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000560100000072d907000f510007140028", 0x22)

[ 1268.082266] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1268.092628] binder: 1348:1353 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1268.111669] binder_release_work: 39 callbacks suppressed
[ 1268.111676] binder: undelivered TRANSACTION_ERROR: 29201
19:41:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
ioctl$CAPI_GET_PROFILE(r3, 0xc0404309, &(0x7f0000000080)=0x8)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000000)={0xa, 0x101, 0x2})

[ 1268.163069] binder: undelivered TRANSACTION_ERROR: 29201
19:41:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006800000080"], 0x0, 0x0, 0x0})

19:41:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x48, 0x0})

19:41:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000142000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000570100000072d907000f510007140028", 0x22)

19:41:26 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=@getnetconf={0x14, 0x52, 0x300, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000400)={0x1, 0x2, @stop_pts=0x100000001})

[ 1268.305101] binder_alloc: 10471: binder_alloc_buf size 549755813992 failed, no address space
[ 1268.387949] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1268.417484] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1268.426772] binder: 1384:1385 transaction failed 29201/-28, size 0-549755813992 line 3035
19:41:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000043000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1268.441858] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1268.469335] binder: undelivered TRANSACTION_ERROR: 29201
19:41:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000080"], 0x0, 0x0, 0x0})

19:41:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1268.494419] binder: 1394:1395 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:26 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x5348, 0x2000)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0245720, &(0x7f0000000400)={0x1, {0x0, 0x989680}, 0x9, 0xfffffffffffffff9})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r1, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000180)={<r5=>0x0, 0x6}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000380)={r5, 0x80000001, 0x1, 0x7f6f5220, 0xffff, 0x7ff}, 0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000580100000072d907000f510007140028", 0x22)

[ 1268.564888] binder: undelivered TRANSACTION_ERROR: 29201
19:41:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000143000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:26 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4c, 0x0})

[ 1268.672137] binder_alloc: 10471: binder_alloc_buf size 549755814000 failed, no address space
19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000590100000072d907000f510007140028", 0x22)

19:41:26 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0)
bind$packet(r3, &(0x7f00000001c0)={0x11, 0x4, r1, 0x1, 0x100000001, 0x6, @random="9e0280558cc8"}, 0x14)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x80000, 0x0)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$TCFLSH(r3, 0x540b, 0x7)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

[ 1268.743316] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000044000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1268.789268] binder: 1414:1416 transaction failed 29201/-28, size 0-549755813996 line 3035
[ 1268.798377] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:26 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00')
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, [0x0, 0x0, 0x80000001]})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xd07f3b3c7ff8c72e, 0x0)
ioctl$TIOCNOTTY(r3, 0x5422)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1268.840612] binder: undelivered TRANSACTION_ERROR: 29201
[ 1268.849733] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1268.872790] binder: 1425:1426 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005a0100000072d907000f510007140028", 0x22)

[ 1268.915268] binder: undelivered TRANSACTION_ERROR: 29201
19:41:27 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000180)=0x2)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f00000001c0)={0x0, 0x2, 0x2, 0x6, 'syz1\x00', 0x2})

19:41:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000007400000080"], 0x0, 0x0, 0x0})

19:41:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x60, 0x0})

19:41:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000144000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1269.061447] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005b0100000072d907000f510007140028", 0x22)

[ 1269.119120] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000045000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1269.165822] binder_alloc: 10471: binder_alloc_buf size 549755814008 failed, no address space
[ 1269.175160] binder: 1450:1451 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1269.198352] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:27 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'bcsh0\x00', 0x20})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000180)=0xe8)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0xc0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x4000000000000220, 0x0)
r4 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000440)={{{@in=@local, @in=@local, 0x4e21, 0xbed2, 0x4e20, 0x8, 0xa, 0x20, 0x80, 0xaf, 0x0, r4}, {0x1, 0x1, 0x18, 0xa9, 0x9, 0x9, 0x4, 0x1}, {0x1b, 0x3f5, 0x200, 0x2}, 0x5, 0x6e6bc0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@local, 0x4d3, 0x3b}, 0xa, @in6=@ipv4={[], [], @local}, 0x3507, 0x4, 0x0, 0x7, 0x4, 0x4, 0x3ff}}, 0xe8)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000300)={0x0, 0xfffffffffffffffb, 0x73, 0x10000, @buffer={0x0, 0xa3, &(0x7f0000000080)=""/163}, &(0x7f0000000200)="e9eb3b367164dd244f25400920c4f3714d3917ff28b4ff3dbf50657d27e8dfa0017b8feebc11609a669276b97ad1d0b5c7060ffaa30ceb8aaa30f304bbbcd704518d80c37bb211903caaefec3b9965839778beef6d5a31b0171096725431344fe79fab37f8e8f689266e2f9460a28507627ab8", &(0x7f0000000280)=""/92, 0x1, 0x0, 0x1, &(0x7f0000000140)})

[ 1269.244373] binder: undelivered TRANSACTION_ERROR: 29201
[ 1269.261905] binder: 1452:1453 transaction failed 29201/-28, size 0-549755814004 line 3035
19:41:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x68, 0x0})

19:41:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000145000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1269.303138] binder: undelivered TRANSACTION_ERROR: 29201
19:41:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005c0100000072d907000f510007140028", 0x22)

19:41:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000007a00000080"], 0x0, 0x0, 0x0})

[ 1269.419564] binder: 1476:1477 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005d0100000072d907000f510007140028", 0x22)

19:41:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6c, 0x0})

19:41:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000046000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1269.469127] binder: undelivered TRANSACTION_ERROR: 29201
[ 1269.497471] binder: 1488:1489 transaction failed 29201/-28, size 0-549755814010 line 3035
[ 1269.507945] binder: undelivered TRANSACTION_ERROR: 29201
19:41:27 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={<r3=>0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x6, 0x1, 0x8, 0x38, 0x40}, &(0x7f0000000580)=0x98)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000005c0)=@assoc_id=r3, &(0x7f0000000600)=0x4)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000021004}, 0x18)
getpid()
r4 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
ioctl$sock_proto_private(r0, 0x89ef, &(0x7f0000000640)="055955852219c6bdad8303ff3ec570231d028e2163429959cdcd4d463375f2feafa97d2dc3f7433e8bce0569b315e8dc37dc443af2d3637c77198f5dbb1995d3ecbe3fe054032808668c666d8802b5d40f126cc531a55ab362d96573374f0e9e1368c958ca0d29444dc97f83cf2cf922d344b622fb9832755d49ec9ce287d830269acf8957fd7fe03a03b07f449d756cc0600b69aaaa15088a0fc130cc6d402dd97e23c99cd53489af376ad4706fc24cdb")
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000180)={<r6=>0x0, 0xe4d}, &(0x7f00000001c0)=0x8)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000700)="2c250b4ce05695f9485b2755319ba4309bbaa1ef2d08d7c43af23e2a22e1a50c913d2b1acd2dbca246b4a33431e4025c5376cdb001928bfddb0f5d69e7ef54855b6c55231bf01cb1c02bb648eaaa871373db6f022c087d67cb86dc50875cb6a276a0167e33a60a0c4952ba881b0b434accdecf6814bc0b9b2514c763b5f64afae176a287907f1959219868d22da2a3ae7d430196a1ca021f15e2eb3264f24059faeaf9f1284455c27a0cf2c47d3c3d5fc67afcbf11e95e83f317970c034e22744cb2fac184924600161ec8eca51e23564dab6957dbd6aeb543056e", 0xdb)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={r6, @in={{0x2, 0x4e23, @multicast2}}, 0x6, 0x1, 0xfffffffffffffffa, 0x4, 0x3a}, 0x98)
close(r1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000440))
r7 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_UNLOCK(r7, 0xc)

19:41:27 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
write$P9_RREAD(r3, &(0x7f0000000080)={0x12, 0x75, 0x2, {0x7, "0b5f6d319c37bc"}}, 0x12)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000010080"], 0x0, 0x0, 0x0})

19:41:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005e0100000072d907000f510007140028", 0x22)

19:41:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x74, 0x0})

19:41:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000146000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:27 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000380)={0xb28e, 0x2, 'client0\x00', 0x4, "8444060fd3328297", "8be4bf419f73eaa11ea708bb77c7c6c0970bd1e8d07d6e60c5ad9308efcad487", 0x7, 0x9})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x20200, 0xfffffffffffffe81)
close(r1)

19:41:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000020080"], 0x0, 0x0, 0x0})

19:41:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300005f0100000072d907000f510007140028", 0x22)

19:41:27 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7a, 0x0})

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000047000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000030080"], 0x0, 0x0, 0x0})

19:41:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:28 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000600100000072d907000f510007140028", 0x22)

19:41:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x300, 0x0})

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000147000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040080"], 0x0, 0x0, 0x0})

19:41:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x500, 0x0})

19:41:28 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x1, 0x0)
accept4$alg(r1, 0x0, 0x0, 0x800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r2)

19:41:28 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000610100000072d907000f510007140028", 0x22)

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000048000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000050080"], 0x0, 0x0, 0x0})

19:41:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x600, 0x0})

19:41:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x48040)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0x7f, 0x200}}, 0x30)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000148000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000180))
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
get_thread_area(&(0x7f00000000c0)={0x7, 0x20100800, 0x3000, 0x4e04, 0x2, 0x5, 0x0, 0x81, 0xb03, 0xfffffffffffffffc})
r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r3 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0)
setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000400)={@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8)
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000003c0)={0x0, 0x1ff, 0x66, &(0x7f0000000380)=0x6})
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)
close(r1)
readahead(r2, 0x200, 0x81)

19:41:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000060080"], 0x0, 0x0, 0x0})

19:41:28 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000620100000072d907000f510007140028", 0x22)

19:41:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x700, 0x0})

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000049000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000630100000072d907000f510007140028", 0x22)

19:41:28 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r2 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)
ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000180)={'veth0_to_bond\x00', 0x67b})

19:41:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000070080"], 0x0, 0x0, 0x0})

19:41:28 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xe63, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:28 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xa00, 0x0})

19:41:28 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000149000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:28 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000640100000072d907000f510007140028", 0x22)

19:41:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000120080"], 0x0, 0x0, 0x0})

19:41:29 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
r3 = socket$l2tp(0x18, 0x1, 0x1)
connect$l2tp(r3, &(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e)
sendmmsg(r3, &(0x7f0000005fc0), 0x800000000000059, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000500)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffe}, 0x4)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r5 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r5, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x1200, 0x0})

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:29 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000650100000072d907000f510007140028", 0x22)

19:41:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2715, 0x1, 0x4, 0x2000, &(0x7f0000009000/0x2000)=nil})
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
ioctl(r1, 0x5, &(0x7f0000000080)="6ebd4f9602ba0c935c6691c686501555e13ac4182151e5d5e7feaa965feedb8688e1c05617bf25319e9e59e21528288b9ea93c78a5f5203ba47c8d7a2115e0d587093eac16480904cf9cf6e3deffc0f7e09ab5e90bd91305d78105c5d2eeda3e9856de7e394be70484c000451e520dcdc008ccfd2db03798f999aab8e9a033a0b2945e")
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000200080"], 0x0, 0x0, 0x0})

19:41:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x2000, 0x0})

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:29 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000660100000072d907000f510007140028", 0x22)

19:41:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0080"], 0x0, 0x0, 0x0})

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x3f00, 0x0})

19:41:29 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={<r2=>0x0, 0x80000})
r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x4, 0x220000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000380)={r2, 0x80000, r3})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffff, 0x1)
ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000240)={0x200040323, 0x2})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:29 executing program 2:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x30000, 0x0)
ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000080)=0x3)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000400080"], 0x0, 0x0, 0x0})

19:41:29 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000670100000072d907000f510007140028", 0x22)

19:41:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4800, 0x0})

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1271.757748] vhci_hcd: vhci_device speed not set
19:41:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000480080"], 0x0, 0x0, 0x0})

19:41:29 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000680100000072d907000f510007140028", 0x22)

19:41:29 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4c00, 0x0})

19:41:29 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1002, 0x8001)
ioctl$VIDIOC_G_EDID(r3, 0xc0245628, &(0x7f00000000c0)={0x0, 0x4, 0x0, [], &(0x7f0000000080)=0x80})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:29 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:30 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vcan0\x00'})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000200)=0x800, 0xfffffffffffffc4c)
sendto(r0, &(0x7f0000000280)="6d49852727970f5a9c53ddfe8cce0130dabb2341e6db4d17ee0e8909b75731ed24fc6f69658e36f4943b87d0fdb0fe50609b5db192087226edba37a07cc123f2842e1117141ffd594e4c99cda84f8ee3099037fd850d929b25dc9bf45e41a824b1f298519bc4b692b0dd3375f50d8e8d91066145adc4e956fd5b773c9b6d9b8b8a49812229bd331bd3e4782b83f253c2935fc95be84fb5e961e2c198ea6822d40ade0e4a2cde285999d54b063a8729159a5420be4f4a56f617dac6d85af73359dc33b92f1873d4845957ab312da8bfc28c5f72a848a56a2418f6fee8bac7f44be73a4f479543057fcf7a14394400807767973c02fe", 0xf5, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={<r2=>0x0, 0x80000})
r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x4, 0x220000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000380)={r2, 0x80000, r3})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/17, 0x10000, 0x4000000001000}, 0x18)
getpid()
syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3e, 0x80000)
r4 = creat(&(0x7f0000000100)='./file0\x00', 0x1d0)
r5 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffff, 0x1)
ioctl$FS_IOC_FSGETXATTR(r5, 0xc0185500, &(0x7f0000000240)={0x200040323, 0x2})
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000140)={0x8, 0x3})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x8, 0x4)
close(r1)

19:41:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0080"], 0x0, 0x0, 0x0})

19:41:30 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000690100000072d907000f510007140028", 0x22)

19:41:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6000, 0x0})

19:41:30 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006a0100000072d907000f510007140028", 0x22)

19:41:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000600080"], 0x0, 0x0, 0x0})

19:41:30 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x5, 0x4, 0x4, 0x4, '\x00', 0xe483})
finit_module(r0, &(0x7f0000000080)='\x00', 0x3)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x600000, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r2 = dup3(r1, r0, 0x80000)
ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0xe)
ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40086410, &(0x7f0000000280)={0x94, &(0x7f00000001c0)="10a68832ec5d784fdcf57340a1acae1ed111070882e2d7ec752048751ad10b5b67bd991d6fe6e1c890c63d16f0a77d8b35222f5a187aa88ef2a31f0cdc15fbfb202155469dd6141a51ce21b434bbe255582c02501896bda5a44411ec69e2f40cd5487ced9887f6798471537a131f3d73b5d1bc5828adf17a47620a2cb8e72db552ad7d4e3cbdf5205bb6e2af8ce84dfd1c41c06d"})
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000002c0)={0x2, 0x3, 0x80000001, 0x2, 0x100000001})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000300)={0x8, <r3=>0x0, 0x10001, 0x6})
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f0000000340)={0x8, r3})
setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000380)=0x8, 0x4)
r4 = shmget(0x0, 0x2000, 0x21, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r4, 0xd, &(0x7f00000003c0)=""/121)
r5 = accept4(r0, &(0x7f0000000440)=@ipx, &(0x7f00000004c0)=0x80, 0x80000)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000500)={r2, 0x4, 0x8000, r1})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r5, 0xc0bc5351, &(0x7f0000000540)={0x10000, 0x0, 'client1\x00', 0x2, "d07f4801aab79329", "3315f8bb2a71183c60be525cb6de34ea5b714249b2b2bbc1181f4d1ea68def1e", 0x7, 0x1})
write$P9_RWALK(r2, &(0x7f0000000600)={0x16, 0x6f, 0x2, {0x1, [{0x44, 0x1, 0x6}]}}, 0x16)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x28, &(0x7f0000000640)={0x0, <r6=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={r6, 0x7fffffff, 0x18}, 0xc)
ioperm(0x100, 0x7, 0x100000000)
getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000700)={@multicast1, @initdev, @initdev}, &(0x7f0000000740)=0xc)
ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000000780)={r3, 0x2})
write$P9_RXATTRWALK(r1, &(0x7f00000007c0)={0xf, 0x1f, 0x2, 0xfffffffffffff800}, 0xf)
ioctl$VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000800)={0x1, @sdr={0x77777353, 0x1f}})
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000900)=0x200, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000940)={@empty, @multicast1, 0x1, 0x2, [@broadcast, @loopback]}, 0x18)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000980)={<r7=>0x0, 0x1}, &(0x7f00000009c0)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a00)={r7, 0xf0, "b895f7a13af0e6d6c06996f27686c5f22ee6872631d030571599e7e382d7e0b8fb9830a441555b8c73bd66c7e802fe8a05a4a2e19a61b226c5072a8f4eaf7fe3eeafa60e68a439876aa0342e6c92539233b932c589319ea8643d0bce52165556f279d1d5505ab4ac979fd71b3863eefcdab35e784e80df17fc86afd8f7cad92e9517e38b6617a44943fc49e426c693764ec67ceeaf2e6ce517a9341baea385ecfc56a6243192ad4f23cabb0a603d7af1ca86d63ecbf3caf67ec3d5a34baf8dce36144472dddbcae4497750484dc3dbc047c85913ec6243ab2fffa4512c905bbd508dc2c2a987b32ecb57be9894d7a4cf"}, &(0x7f0000000b00)=0xf8)

19:41:30 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6800, 0x0})

19:41:30 executing program 2:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000080)={0x79})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x82480, 0x0)
getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000140)={@initdev, @local}, &(0x7f0000000180)=0x8)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r1, 0x0)
ioctl$KVM_SMI(r1, 0xaeb7)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r3 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000000))

19:41:30 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:30 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006b0100000072d907000f510007140028", 0x22)

19:41:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000680080"], 0x0, 0x0, 0x0})

[ 1272.454421] __nla_parse: 68 callbacks suppressed
[ 1272.454431] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6c00, 0x0})

19:41:30 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000000, 0x31, r0, 0xffffffffffffffff)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

19:41:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xffffffffffffffff, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1272.503790] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0080"], 0x0, 0x0, 0x0})

[ 1272.554363] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:30 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:30 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006c0100000072d907000f510007140028", 0x22)

19:41:30 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1272.649195] binder_alloc_new_buf_locked: 42 callbacks suppressed
[ 1272.649206] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:30 executing program 1:
r0 = socket$nl_generic(0xa, 0x3, 0x10)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0x255, 0x2d}, 0x2)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x81, 0x8000)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff}, 0x106, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000400)={0x5, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x1}}, 0x83)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000002000)=""/4096)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x3e}, 0x1c2)
ioctl$TUNGETFILTER(r1, 0x800854db, &(0x7f0000000040)=""/225)

[ 1272.723439] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1272.782694] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1272.786773] binder_alloc_new_buf_locked: 42 callbacks suppressed
[ 1272.786787] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1272.819206] binder_alloc: 10471: binder_alloc_buf size 549762891776 failed, no address space
19:41:30 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7400, 0x0})

[ 1272.831779] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1272.835306] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1272.863551] binder_alloc: 10471: binder_alloc_buf size 549762891776 failed, no address space
19:41:30 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
acct(&(0x7f0000000080)='./file0\x00')
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x17b], [0xc2]})

19:41:30 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:30 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006d0100000072d907000f510007140028", 0x22)

[ 1272.909888] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1272.924911] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1272.944525] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000140)={<r3=>0x0, 0xffff}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000340)={r3, @in={{0x2, 0x4e24, @local}}, [0x9, 0x0, 0x3, 0x8, 0x3, 0x100, 0xffff, 0x9, 0xfff, 0x89, 0x7ff, 0x54, 0x12000000, 0x1, 0x7ff]}, &(0x7f0000000440)=0x100)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x1e, 0x3, @thr={&(0x7f0000000080)="96704683300c2dc202c232fc29c186147c66a0e63d62ffee42cedcd1088886120deb81fd7cf81e3638da49438ae78a8ac10ba95277e427a04747e0f3d11d1c73d622b85b78e9a7c1e99f0917da11e50f9749df35c2bc90cd6708889433ff0d89cbd2c1070463b6d116352e281c9750c67b1a2ba566131f31989029f68f10f264079ec92edd1613108570cbfc", &(0x7f0000000200)="95f65edda5df4d1e764bb8418f218f3ca344d78eb5cf409d7610a65845c709f5bce0b51ea8fe2b099e5f3a28929c74c0f5e81b4c06ea99bb24345d52a783e25fc657b337ca8cbd96e7d00c547bcb7e4b8869bfbaab46a2f5f86948d919e7b9aa54e1a245d21246b5e113a393ceec6fb0cfbeaf3391dff5c27fb654fcc4763f"}}, &(0x7f00000002c0)=<r4=>0x0)
timer_gettime(r4, &(0x7f0000000280))

[ 1273.006689] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000740080"], 0x0, 0x0, 0x0})

[ 1273.055340] binder_transaction: 43 callbacks suppressed
[ 1273.055355] binder: 1819:1820 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1273.071562] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7a00, 0x0})

[ 1273.127740] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1273.157660] binder_alloc: 10471: binder_alloc_buf size 549763416064 failed, no address space
[ 1273.167360] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:31 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000004f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0xfffffffe, 0x1ffffd)
ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f00000001c0)=0xffffffffcd7bba18)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000000)={0x56, &(0x7f0000000080)=""/86})

19:41:31 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006e0100000072d907000f510007140028", 0x22)

[ 1273.226537] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1273.306015] binder: 1837:1838 transaction failed 29201/-28, size 0-549763416064 line 3035
[ 1273.306022] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1273.306037] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:31 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000014f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x2000000000000002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x8000000000000079})
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x400, 0x0)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10020}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x108, r3, 0x600, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xbf}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8716}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x59}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc993}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x79e}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x20040011)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x100, 0x0)
r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4044004)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r4, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

19:41:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000007a0080"], 0x0, 0x0, 0x0})

[ 1273.355705] binder_release_work: 44 callbacks suppressed
[ 1273.355712] binder: undelivered TRANSACTION_ERROR: 29201
[ 1273.378754] binder: 1843:1844 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:31 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46")
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x1, 0x2}}, 0x14)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000004c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x4, 0x5, "9b7735f5bdc9ec7421bcc78ed2424f26db2d145fd67aa24fb00a4bd1c87a0b133af93466baf8e0f5f54b53abb58b4999da99e59f2595c79e849a588f612011", 0x1a}, {0x0}, 0x0, 0x3}, 0x9c)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380))
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000002f40)=""/4096)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r3, 0xffffffffffffffce)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r3, 0x3, 0x1, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20)
ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000280)=0x7)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122)
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f00000002c0)=""/60)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20080, 0x0)

[ 1273.442546] binder: undelivered TRANSACTION_ERROR: 29201
19:41:31 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300006f0100000072d907000f510007140028", 0x22)

[ 1273.519195] binder_alloc: 10471: binder_alloc_buf size 549763809280 failed, no address space
19:41:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x1000000, 0x0})

[ 1273.589494] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:31 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000050000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1273.681383] binder: 1864:1865 transaction failed 29201/-28, size 0-549763809280 line 3035
[ 1273.682701] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1273.708530] binder: undelivered TRANSACTION_ERROR: 29201
19:41:31 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000700100000072d907000f510007140028", 0x22)

[ 1273.727009] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd0080"], 0x0, 0x0, 0x0})

19:41:31 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000150000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1273.765801] binder: 1874:1875 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:31 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={<r3=>0x0, 0x1}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x10000, 0x3, 0x202, 0xffffffff, 0x9, 0x3574debc, 0x101, 0x8f, r3}, 0x20)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x7f822c597dae944e)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={<r5=>0x0, 0xa79, 0x1, [0x100]}, &(0x7f0000000100)=0xa)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @empty}}}, 0x84)
ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000080))

19:41:31 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000580)="0234866d2f3d4ef9c882e457ac919c235faa10d74ef3756a1aca950aa6139af2de8c4b8f5b5d52b5bb46")
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
write$P9_RATTACH(r2, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x1, 0x2}}, 0x14)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, &(0x7f0000000780))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006)
setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f00000004c0)={@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x4, 0x5, "9b7735f5bdc9ec7421bcc78ed2424f26db2d145fd67aa24fb00a4bd1c87a0b133af93466baf8e0f5f54b53abb58b4999da99e59f2595c79e849a588f612011", 0x1a}, {0x0}, 0x0, 0x3}, 0x9c)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000ec0)={0x0, 0x0, 0x2080})
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}}, &(0x7f0000000380))
ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000002f40)=""/4096)
r3 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/null\x00', 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600)=r3, 0xffffffffffffffce)
r4 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000007c0)=0x800000000000002, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r4, &(0x7f0000000840)={0x2, 0x4e20, @loopback}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={r3, 0x3, 0x1, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20)
ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000280)=0x7)
sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
mq_timedsend(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000200)=""/122)
ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f00000002c0)=""/60)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20080, 0x0)

19:41:31 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000051000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1273.851110] binder: undelivered TRANSACTION_ERROR: 29201
[ 1273.871042] binder_alloc: 10471: binder_alloc_buf size -72057044265468416 failed, no address space
19:41:31 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000710100000072d907000f510007140028", 0x22)

19:41:31 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x2000000, 0x0})

[ 1273.959247] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1274.019326] binder: 1890:1891 transaction failed 29201/-28, size -72057594037927936-549772459519 line 3035
[ 1274.034706] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:32 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000720100000072d907000f510007140028", 0x22)

[ 1274.067732] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1274.087033] binder: undelivered TRANSACTION_ERROR: 29201
[ 1274.105147] binder: 1903:1904 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:32 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000151000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1274.113742] binder: 1890:1891 transaction failed 29201/-28, size -72057594037927936-549772459519 line 3035
[ 1274.130584] binder: undelivered TRANSACTION_ERROR: 29201
[ 1274.155570] binder: undelivered TRANSACTION_ERROR: 29201
19:41:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = dup(r0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f0000000080)="ee2521a656a64b08c7a9c558232cda78d3e00428cac465627aed93ab736aaef7c24bbcb755616cd16456e190b1c783aa2914403ffc3ed24c520ce59730561c94bc0f439f97b2710b142666999067357a2a01b40dde3c2d0ec272969986a29ff81c1baf5be8", &(0x7f0000000200)=""/196}, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
fcntl$setsig(r0, 0xa, 0x3a)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff0080"], 0x0, 0x0, 0x0})

19:41:32 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000730100000072d907000f510007140028", 0x22)

19:41:32 executing program 1:
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r0, 0x65, 0x4, 0x0, 0x0)
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000000)={[0x11f002, 0xf000, 0xf000, 0x10000], 0x6, 0x4})
fsync(r0)

19:41:32 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000052000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x3000000, 0x0})

[ 1274.332229] binder: 1923:1924 transaction failed 29201/-28, size -216172782113783808-549772591101 line 3035
19:41:32 executing program 2:
socket$pppoe(0x18, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x3)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40001, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1274.400422] binder: 1933:1934 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1274.429420] binder: undelivered TRANSACTION_ERROR: 29201
19:41:32 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r1 = eventfd2(0x0, 0x0)
r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x2)
ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x2)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, &(0x7f0000f1dff8))

19:41:32 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000740100000072d907000f510007140028", 0x22)

[ 1274.464084] binder: undelivered TRANSACTION_ERROR: 29201
19:41:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:41:32 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000152000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4000000, 0x0})

[ 1274.608780] binder: 1958:1959 got transaction with invalid offsets ptr
[ 1274.645514] binder: undelivered TRANSACTION_ERROR: 29201
19:41:32 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000053000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x5000000, 0x0})

19:41:32 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000750100000072d907000f510007140028", 0x22)

19:41:32 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x201, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100000000000200, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket(0x4, 0x7, 0xab)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x158, r2, 0xe00, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb268}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6f2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
dup(r0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x200, 0x101400)
ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x3, 0x5, 0xffffffff})
mkdir(&(0x7f0000000600)='./file0\x00', 0x2)
recvmsg(r3, &(0x7f00000005c0)={&(0x7f00000003c0)=@generic, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000500)=""/182, 0xb6}, {&(0x7f0000000080)=""/37, 0x25}], 0x3, &(0x7f0000000340)=""/51, 0x33}, 0x2120)

19:41:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000802d000000"], 0x0, 0x0, 0x0})

19:41:32 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x0, &(0x7f0000000080)=""/11, &(0x7f00000000c0)=""/30, &(0x7f0000000200)=""/208, 0x1f000})

19:41:32 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000153000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:32 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000760100000072d907000f510007140028", 0x22)

19:41:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe0f50500"], 0x0, 0x0, 0x0})

19:41:32 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6000000, 0x0})

[ 1275.023964] Unknown ioctl 1076408081
19:41:33 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000054000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1275.054470] Unknown ioctl 1076408081
19:41:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7000000, 0x0})

19:41:33 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000770100000072d907000f510007140028", 0x22)

19:41:33 executing program 1:
r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x1000, 0x4)
socket(0x2000000001d, 0x0, 0x0)

19:41:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000200000080"], 0x0, 0x0, 0x0})

19:41:33 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000154000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_open_dev$usb(&(0x7f00000002c0)='/dev/bus/usb/00#/00#\x00', 0x5, 0x400000)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000500)={0x5, 0x6, 0x64d, 0x5, '\x00', 0xce})
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000300)=@sack_info={<r4=>0x0, 0x9, 0x1}, &(0x7f0000000340)=0xc)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e20, 0xf3b8, @mcast2, 0xa3}}}, &(0x7f0000000440)=0x84)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
mmap(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1000002, 0x40013, r0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000080)={0xb35e, 0x5, 0x155})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={<r5=>0x0, @in6={{0xa, 0x4e21, 0x56, @loopback, 0x6}}, 0x2790ada8, 0x101, 0x4, 0x80000000, 0xd11}, &(0x7f0000000000)=0x98)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0x101}, &(0x7f0000000140)=0x8)

[ 1275.281819] can: request_module (can-proto-0) failed.
19:41:33 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000780100000072d907000f510007140028", 0x22)

19:41:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xa000000, 0x0})

19:41:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000300000080"], 0x0, 0x0, 0x0})

[ 1275.352210] can: request_module (can-proto-0) failed.
19:41:33 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000055000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:33 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000240))
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200))
r1 = syz_open_pts(r0, 0x0)
modify_ldt$read(0x0, &(0x7f0000000000)=""/5, 0x5)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect(r2, &(0x7f0000000100)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8004}, 0x80)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6})
read(r1, &(0x7f00000000c0)=""/19, 0x8)

19:41:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x12000000, 0x0})

19:41:33 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000790100000072d907000f510007140028", 0x22)

19:41:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000400000080"], 0x0, 0x0, 0x0})

19:41:33 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000155000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = dup3(r0, r0, 0x80000)
write$nbd(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="6744669801000000030000000400000035a7a6ce0b2f9b5ddaa74e7a5b5d0884d8236134155e68bb70d90fdd7d88d390451b7bc0d4141ca656e6786648fecff40d3ee0a9b74b09594beac246948c3256156a5216af991fffbad409508d6de32abdd2d6027fafafa674113012e537810c0c66591b653deb6dc32c53bd3b7f009f28e6af19eb65af512427dfacdb1bd55e97d47e899b6ae7f94bd1418d8cd24f407d4f91fd9268f445e211652c3e70e9bf2e54e434fbd8888ff18641361c0a1bba4ee9b7c0f9bd9c0054741072bfd362015f270af220f3287d5831515cdde4fe6e3497e01240347fdc3f2695737f132b41ec3a512877264f7724a1cedb9d2d8ba57f863d0ba47bcbd855633481cbc9f7e4379e78eceff60bb91b8bb8358f5f788ac4c68593f2ff4bea3b67581b5808809c9f0c433f8da305a4942b009fb226f0e3aec76274a0caceeb0d5a3f6c7d4007860bbfba6ff7035896a0b06d054f483c4e20702ece17fcf4976e16ab17f388074e47ce8406f7a0b345ad"], 0xaf)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x2, 0x11, r3, 0x20000000000)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x20000000, 0x0})

19:41:33 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300007a0100000072d907000f510007140028", 0x22)

19:41:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000500000080"], 0x0, 0x0, 0x0})

19:41:33 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000056000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:33 executing program 1:
socket(0x10, 0xf19b20b842f3c069, 0x9)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc00c64b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3})
r2 = shmget(0x3, 0x3000, 0x80, &(0x7f0000ffc000/0x3000)=nil)
shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x0)
sendfile(r1, r0, &(0x7f00000001c0), 0x8)
syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2)
init_module(&(0x7f0000000000)='\x00', 0x1, &(0x7f00000000c0)='\x00')
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000200)={0x0, 0x0, 0x100, 0x4, {0x3, 0x800, 0x3, 0x1}})

19:41:33 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x3f000000, 0x0})

19:41:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000600000080"], 0x0, 0x0, 0x0})

19:41:34 executing program 1:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000680))
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x88000, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90101001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000)

19:41:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x48000000, 0x0})

19:41:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x4, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0)
ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f00000000c0))
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0x335, r3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000200)="58ff6d361796488f418896c22e6d4bf5c85f59f9c6747083b5f4bf48b9482affb156b65080b63a664fabb0dae0e7f3b3ec13441b18734c20a13e1f8a2a682f49ec71037507878dc7bfce44117e45", 0x4e, r3)

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300007b0100000072d907000f510007140028", 0x22)

19:41:34 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000156000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4c000000, 0x0})

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000870100000072d907000f510007140028", 0x22)

19:41:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000700000080"], 0x0, 0x0, 0x0})

19:41:34 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/sequencer2\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000200)=0x1a)
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff8, 0x0, r1})
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x0, 0x0)
r3 = dup(r2)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106, 0x100b}}, 0x20)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x20000000000}, 0x1c)
personality(0x0)
listen(r4, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r4})
bind(0xffffffffffffffff, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3)
sendto$inet6(r5, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000))
tkill(r6, 0x401104000000016)
syz_open_procfs(0x0, &(0x7f0000000280)='net/raw\x00')
syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2)

19:41:34 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000057000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010200000072d907000f510007140028", 0x22)

19:41:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000001200000080"], 0x0, 0x0, 0x0})

19:41:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff8eef2388, 0x0)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x60000000, 0x0})

19:41:34 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000157000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:34 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140)=0x81, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000bfcffc), &(0x7f0000000100)=0x4)

19:41:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000004800000080"], 0x0, 0x0, 0x0})

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000300000072d907000f510007140028", 0x22)

19:41:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x68000000, 0x0})

19:41:34 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000058000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010300000072d907000f510007140028", 0x22)

19:41:34 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000340))
write(r0, &(0x7f0000000040)="220000005a000324c1b669000005000f80ff000000000000f8b16f040000fbe80000", 0x22)
getsockopt$inet_dccp_int(r0, 0x21, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in=@remote, 0x4e21, 0x0, 0x4e20, 0x10001, 0x2, 0x0, 0x0, 0x0, r1, r2}, {0x3, 0x3f, 0x2, 0x1, 0x9, 0xfffffffffffffff8, 0x100000001, 0x63e1}, {0x2, 0x2, 0x18000000000}, 0x9, 0x6e6bb5, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d4, 0xff}, 0x2, @in6=@local, 0x34ff, 0x3, 0x3, 0x6, 0x7, 0x36fd, 0x9}}, 0xe8)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x2040, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
getpeername$inet6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000300)=0x1c)

19:41:34 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x44000, 0x0)
write$capi20_data(r2, &(0x7f00000000c0)={{0x10, 0x4, 0x8, 0x83, 0xff, 0x1}, 0xa8, "40eb86a894dbf836cd78d4949a8a65b2344c65023daeb29ff802d7ca6228195e99f83edf78f995a490e5d5b96f82a472547a38228f066e8bf6df84e704309e60827635daea8f27e7d93632726d46025dc6252af7571f7d1d83d32b8d3fb3d17ff1c3a7818274666bf2a6bcd0247b578104c7dcf60653ab1c18bf2bd7f37f7149d92e5bb0093183d69a548958c92b7a41565a18f0df0d22603c6fd3082adfb5e5c319b4cf1350fb28"}, 0xba)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r1)
bind$isdn(r4, &(0x7f0000000000)={0x22, 0x1ff, 0xe0e3, 0xab3, 0x6}, 0x6)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000004c00000080"], 0x0, 0x0, 0x0})

19:41:34 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000158000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:34 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6c000000, 0x0})

19:41:34 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000500000072d907000f510007140028", 0x22)

19:41:34 executing program 1:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e0000001200594ce4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x12b4eb0da6806342}, 0x0)

19:41:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006000000080"], 0x0, 0x0, 0x0})

19:41:35 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000059000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:35 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010500000072d907000f510007140028", 0x22)

19:41:35 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x4000)
ioctl$RTC_PLL_SET(r0, 0x401c7012, &(0x7f0000000100)={0x0, 0xffffffffffffe587, 0x7, 0x9cb4, 0x5756, 0x0, 0x10001})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
sendmsg$tipc(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001440)="ce6d3c18e3093162be843e52ede0b11c5b027e4fe3e941baa6bffc58a0a6fa5f5d7f960c6c8986ca55cd56f415d44504be78712206fe7bec0820891861c755ee0fdcbf91884000800b426dc9ea942cb6878b62afdceec02175742fd666b6c576c3442338e13b64bc20e392783d7c999e0b9ee17108c4f546b421906dd8e6dbe799cab0510c13de263b714a2bcf092a613f", 0x91}], 0x1}, 0x0)
chroot(&(0x7f0000000040)='./file0\x00')
r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x200002)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000200)={0x0, 0x0, @ioapic})
setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0)

19:41:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x74000000, 0x0})

19:41:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup2(r0, r0)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000000)={0x3, 0x8})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:35 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000600000072d907000f510007140028", 0x22)

19:41:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006800000080"], 0x0, 0x0, 0x0})

19:41:35 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000159000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7a000000, 0x0})

19:41:35 executing program 1:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x101000, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x4004700e, 0x1)
mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x32, r0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000100)={0xfffffffffffffffa}, 0x0, 0x26e)
r1 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x8, 0x4, @tid=r1}, &(0x7f0000000180))
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000))
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0)
read(r2, &(0x7f0000000080)=""/128, 0xae3f1a6)

19:41:35 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010600000072d907000f510007140028", 0x22)

[ 1277.505628] QAT: Invalid ioctl
19:41:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xfdfdffff, 0x0})

19:41:35 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000006c00000080"], 0x0, 0x0, 0x0})

[ 1277.560448] QAT: Invalid ioctl
19:41:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x3)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0xff, @local, 0x4e21, 0x3, 'sh\x00', 0x10, 0x7, 0xd}, 0x2c)
r4 = syz_open_dev$sndpcmp(&(0x7f0000002040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2080)
setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000002080)=0x924, 0x2)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
r5 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x208000)
write$capi20(r5, &(0x7f0000000100)={0x10, 0x3, 0xb, 0x83, 0x7, 0x4}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1277.591569] __nla_parse: 67 callbacks suppressed
[ 1277.591577] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:35 executing program 1:
r0 = syz_open_dev$vcsn(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x80002, 0x2)
sendto$rxrpc(r0, &(0x7f0000000000)="b5f7ab8f86e56f2f237ffccfb3bf3dc11ea25615c58820467b50bd2627d2399fbfd1a19130a05ba2851e28249585d47eaef492febad7f9081ebf021961ea3dbd1acd7a9302455139169a536e235865e0c31724e23fd63e28a79b80e0e727377d0e0652cc7a277de4044374fecd4a171c9731426a7ab4a2c542c30a41b45977ed4a6644a72317ce907fb9864f8a1c609293c7ee966c51f2ce91bb8512d3362159f4600b3959d6a6479a93bb074ef9cc112cce7a9f2b3f8f558da3e2e0a00f90bd3f25b1c613e7ace48f56440525ff6aad9de1707997c15f3c0aa6a5576db82ebbe5d35890311bf9c77e2218f30887592966455f58cf551b478caf60edc87308309c97eabbbfc9ef6f441500c619e06dbf70b862c6ede87e05b61328d7e0d7ed0c387c846b3fce964e41c5ca1b0e17b30c5eb9e36e8c0f4e58af3675b346a62771ddd27b2484bc0529ef9519fc1f2e863c8fbc87e05deadc7e0a103cea787bf224fc61de4da6a317451818d6a7c66181b10a1b0f64ffbd2a1832adbe3afbefa1d11b4e40047bbe259acdbf85b3fc26f238348b361c7d1e11eb3735dea7e3679084262284f943f1ae064ba26414092608cc3e9f81dfb34f8d19e4e58a97fd9776a6c7bfe3a610cd8f5fc49c7b026ee5060fb637dc2cfd0bfbdf203ffaaeaa58b6cbce0b4b08944331a1a5805ece4a51e8a0cb0343e861a95e0f6e6fb8c5013f501dba2f310ae2fd3b5f653b81f441a82728499591142421b6f1b85f15517d6ca70a4d33883fba03bb7b215f629ce11d7c2d58858cadf5da0fd3ae31210995c1ad99d143ca1e285454a99f524b55b147c4c9711320cca77604235336bc94d2b4ca3c333b4c0dc5cd1a00fd06e0f0a9b53c11c65377a4d5c7e99295d53efe7900004082abad40055a60b0375bd154bfd06d50c6ad4dfbdc74c6445acfd8e79e3ae40c06af1e3961ce5728868aa301ff4847539c4a04c4d0811a56a2cc834b3b40a416d2916cfc073134915d59e458e114b40dd8092a5d5ab392d222cede305be5d25175fbde0043cb9b7a99a78e85ca0aea4a92bca2b7598711c35d2a9231056cabdd00d73c9dbe08f1f8a2297707bfcd507cec35cf5c4a7153c902481c2103d165674efb5ca4fcd1064548fd653b50e71945ecbdad20011940c522c6b6d0550fd96101b116bdc8eea18ef5c7242991eeeb14de319b9973439be159ff3f14c9b97861605ccee09597e6493954fdd6743f733af4960139f544d2d01426dec1c797c2758d4abeb6726c152b585ff14c162c0d5ff9661a394f53b30fe6ac0f17fae7424b2342d2d2b7e29eb6da73cbf715257673c98d907b233e4c6239c3741c7cf16d44b57a97ab68e7c7326e797349acbcf1ae32e2f56bb9314a663e1b93df4783e6cf5c190ea51b804d6091a882da564e1e07dcac175b1e55b6d2af774e71ed5b8f116c17b6e5a8088e5d66c13f9b570d38e97c82b7f0ed4b21d6de2dc1749e3673183ccfdbdf29d9d017657e4a8a060ae01b9e2b2759b0f7b0278442ac0f9307b2e85137c6416333bae645809501223dafa5644599776727fe0ffeae8d2568e10ca6440f3c7d96afa3001cdaf481bcf0e2c1f6f270f2024b889fa84ea67a421c4ac16e7dd6bc3db1bff32f76c2bfdf43c51bfb19f8b490813fc45c7969870ec3c6dea2c384428da4fc53613202c05fbfb1b35e440e7949bc05f2ed97079dabe061aaae159b56483d3f4a6819b31ed1b90234972c1e6d72527a5c08ad77ed4aacfd745adf22fbc619e281c2107053afb5d3ad7daa14eb1ae2c5a72f698f20153a5a24b6fbe57929767d3d5d53794eba35ae2b5b70db8767c25f3029e90d7adbfb230a7ae87ebe2221dd7f2fc285a38953434c21662d3692bcacf3e643aea670d95b56177c2b6b244b724ace13c8771a7e5144a5f3ee20c975f61811d8b19a6dcd1ab07ca1e3577f581fa03976b64cf2b95df9db136b86efea78a64939fbf753225830bc52976dc40891d09c0d8af7615c61367e1b9ed7d67d76e1b9e64718ceb8a5c7cc11d6c1a23210358b80a2fa76fad8a50f3d5cf88628855553a147cb7ad720110f2d24a4102f053e47ea6d7cdd1f1b5641b04f909a1b0d537046db7bb5942f907f56e390d9887dd2bcfafa8d1a570bf6da7418724e7a28c82dd1286a3bf200f6ef4f7ccccdb9999f1bfb61a4458cae24b2477708b776d8b600d26ff63f287a64a5f31c436f2ef5cda99d33b937cdaa55ed705438f06c871b9bc3a1cd267022a065300c48b6e01c3d9b681e05f58ee038022ed849c0db1e22c21d85b5d2a98fbd5c5cd9972857d25cd9507408a7a6b796333392d0a3a12ffecefaea548266d199c9b7f29560bf02de2594c30202333ef65ce3ab4764752f1613491d1dff1444b36d445d020a9063bc614fe76a557e5e0a0c65883de8a1420ee418a60bdc82a01cb44cbbf3a72a29a230472203bc5c991604802026f099ceae8dee65af9927e08ad4176d8c42590e3dca3305babf7aaf2aa9780a7312194cd94c26810851e036aeba5fb7a6174bcd89fa2f918729eca55f3afdc9c588d3ac863622990d85a6375d394d9dbf46f6c040cfb4f041af425c1190c4618e95ea8bfe7b218b7d6635420534106b1b51d2ed492c0b175183f91da04a7a1c272b7c884ca72a8934404fb39733e8a702bf3d187b753b6b40eb81d4eb2e38e3415a8887fc45e6ca5004cab1327fb2f1b5f180205ec0549d74a8c6b2f300f6ed85510cb3e921d43b34db5d8a5573874ed093d6bffe29dcc0379b5059eaa75b64277700a9749513e955376f2fdaacf0bd089608417b849a6599c4397c7c2f20d2aade1fd073dc2b3f7525148d55699bede42f816a6bbc17e6c70cfb5d5fa572ef4309b93bc823114bd47264417b3b8039ada6224fd85aee21f703298646eb17573dcf9da1202a41fa0b5f4afeb48c5fa2daf58e12f471a49e772da0fd780e89de37da544a3087ab2fa6d5dfd3dc6873553a1713bc48f875aea5d5722b1c794d82ba95799a1a1b5476524384f00cf0c747e9e0c41ba34808cfcec0ef7465deaaf15f7898f3194ee531ab6865e57ade4a7c526f4f56319a79a0021eaf209ea2d4eae221799cbc226222c3e5cb6718230c3fa4656e4a4f5140d930c3bc968d834bd00fabb1f8811baf9193e12b0eb54680f28d7f4a5d82c4091c90fbef06620e3fc060aac50610766fefe8ff95d3463321b6326ae0fdf507a02e41a9630ae93915e251595f987eb4d935e5db50aecaa40374f9d46d769d170b7ba052d06f4ee1c4be224ee83134f001f9fd7aa3453b92a70bfe67f840d1684d45b768f8610334ac869374c43ca0e2d654389e0d2ad1907b152091e99114638d65ee2184097d5473e7675463ed096e7a7eff860b20e67b30f39a056203954aacdba03fe9e32b0aba8dd0bd8d4b52c5e1165575f74caeb37c6a375638d8c3cd3e26e1edc577763f3fd9113cfa4ed15225f6063760b454ae0eef3bb40ec3c8c739b4a5bd026bb29340336b20eebaf179db751a807653c9752b4d904cc42d6ebd86ef7d14b6163ded29c14c160747a3698f59205bac21861400f4b2e1cb24c76413e497afb288d43d21a7073f1dc91fc942d4099f33b97d7088e57528185dc15a7511d136353b5526092becfa7de20bb00060b31081ab1c3e9ecd552b9064b6ce559abd37f620745b6451e91e376b1cfda7c36bcbf54eca9e2191b514df2ff9b8c99e6033fc6dd0437fbe1fd9ccb1b426ae61d852630045fd8d208d8aa43b47f78f7181290c510cfed36ec238a6832ed745b83bea3e9e6f8aad95825ecf81bdf6645843f572705a3791b3458ba069606efce5fbc0c1a2dfea947af025f943464701cacb78637d2ea231c885b54f29de1c3d8cf829ae0f5c79da2914303c9102fa49a93509f4dc3274668bc52840dd7b53ee3158e2fa31f487697b319c6c38e11c099277d07b4ac45affe2152c7d87472986d7c96216cbace07dc50d75896c1b60a37397c635c13cc941979127219a7971ec08f3fc44ea81d61997aa365800a714cc915ca217e4b95bffff771a32a1da26be3e9a530b3c53961197bbca1b2d73bc2be86ccfd5de87df8173ea14ac5de4d2edae79b1e1c611d4b878938c4f69c9bfa24fb4a8c2b2e10abcb06f75bcd82c49f18deb256e47e3b309d1d5bb7877eb7b1dfc20334b41d21c104009479b6f64944a9cf751204300d54cb2442e1cb5ccedd4ea0680ca3ef653d1fccf541202b1c1c50151d6984af85f96cbcee8b8e4738bf8ddcbe10dd91a1607aae6a17b8e57e4119e1e2d56a290aedf9ee1fe0103abba79d01f1e59717034617bb82cea3d8b06120fc9d884cff9d24a3a9624ef464e80de2c95cbcec85eec14e8e6fb307be6f6d5bef30e1aff366817d2e355558f57ff60691da91381d8aa9865adb17dfb69366eedec08c49df9ba50b2e0433ff905ee0a56ed4cdbdf7a753d19d7d9933bf7b6913587a088534f0fc5f79b03726eb759e4bfe4afec36ed1affa473106e5b19ca20555f3654dff080d711db00d972a782e3afc4e245e3a34805f3ef0d279574933f89c7158115dff4aec655e87794272d32aad0f3bef0877f946b8b10e0d1db7b4eac3d69810f3b84735f86738f5afa4132472a5e28a548cccd5803746be7bcb84433c80a7f7d63c7ab8a09b6233885bc3d5494909eb1d92162242982676172a79f7590e0c0395b04af51a1b16f31858cd1de882d55b3722a9bcff0e54dce628c0dd65543db2a4239162918228c337630a00bc8e8eb4c739df3dcfb2333d1e34531b94c17da07094226c90219ea5f1772c9e6bd675388f8f89c66de5eca86238cc6d3b9031888c0f73a4b8f6146af9b9b2929fbbc61c51d91a6561fbd9debdfa462d7bc299a6d0d06b1aadbcb10156fe65b7cf8771a0e3af07f4f2c0da1b49965c07d02d01f987ab5e0c0bd0b3b9b52a07bab589df409f5616898db01465b6715dcac5cb1bacfc43ff827f7db7aaa917dcb0355001b621af734e3d4434cbca3ebcf1e6c99a60c58519da3147cec5762d9b56467134b52997407b5d1a42688cccf5934a6b4d49f8626d3a6534638344e4692a6f65a1eb68c2d017fa5b3b421f24a8d23b521774e1208f669b7a8cac1595b6ad9b7621cf54149e3fdcb93b0e41787cfbe391e8b7bfb523bd5dafc27de8b5c1650d7a6894b3c6abedef6ed5775652a8293be42374c5a4233338acea4190701b85b9f87cc7674d5df2146c0dc2ca571591d3815bc982d34638aac744cf4eb400d7f81cfaa7217a56c5e5c58c7794cded34785bc1414c88ba360936b07a6a2a3bbadcadeb0990eb7cfb79a51473251e3d5034ce1f14319bb58049b4d70feb54cd4c05b48e8a7eac4e46c3766369474b2d32b39a9df0ce3f20810e3aeb6f33e869a9400b17c49555d458db03c1161eaa2627d7ae9292a47473a5d9e48384db5fe7a292764a55b1f1b915fb7341813af9df2d00f776a5a3a008c87f2350dae632592b781dec6c01ae061fadd2390867a9d8e33e337df80bdedd4ecb3efcc35a054dc634fd7cf649d5e776557425e9a862bd2a63198dfe450ecbc5f90651edc0137090bc013f5a977f6122318d89c07a614d80e9f7ab20faf8bfef743d3f3535d457c220523622f3620115eaedf452f3a1cfa5a975bd7b4b53e6f6e7846b8deec16c491afd9440c0c64f181be5df12a33687775b1e266709048035e18e000e3cd7a0dd0c0aea70ed4bf1178c1393950a2182491e9f5b5f5ad9c6fbf38487ca67acf2ecba254b71afd6242351d84624f58ff049c64204af6ff", 0x1000, 0x0, &(0x7f0000001000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x5, @remote, 0x20}}, 0x24)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4c, 0x0, 0x0)

19:41:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000007400000080"], 0x0, 0x0, 0x0})

[ 1277.681535] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1277.690364] binder_alloc_new_buf_locked: 36 callbacks suppressed
[ 1277.690372] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1277.719589] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1277.741512] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:35 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xfffffdfd, 0x0})

[ 1277.787952] binder_alloc: 10471: binder_alloc_buf size 549755814008 failed, no address space
[ 1277.805175] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1277.809334] binder_alloc_new_buf_locked: 38 callbacks suppressed
[ 1277.809348] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1277.867145] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:35 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:35 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000700000072d907000f510007140028", 0x22)

19:41:35 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8802, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x1, 0x26c, [0x0, 0x20001000, 0x20001030, 0x2000123c], 0x0, 0x0, &(0x7f0000001000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, 'vcan0\x00', 'erspan0\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', @link_local, [], @dev, [], 0x194, 0x194, 0x1dc, [@comment={'comment\x00', 0x100}]}}, @common=@log={'log\x00', 0x24, {{0x0, "46aefdc2eedaf8ff6fcbbfa67ee31e6bfa4cf9f0761ffdac96c7d300bc1d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x2bc)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={<r2=>0x0, 0x40}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x3f2, 0x8000, 0x4c, 0x8, 0x3f, 0x80000000, 0x7, r2}, 0x20)

[ 1277.919013] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000007a00000080"], 0x0, 0x0, 0x0})

19:41:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000000), &(0x7f0000000080)=0x4)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
eventfd2(0x9, 0x80800)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1278.034413] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x8000000000, 0x0})

[ 1278.076265] binder_alloc: 10471: binder_alloc_buf size 549755814016 failed, no address space
[ 1278.110253] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1278.130875] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1278.132353] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1278.170623] binder_transaction: 38 callbacks suppressed
19:41:36 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1278.170638] binder: 2287:2288 transaction failed 29201/-28, size 0-549755814010 line 3035
[ 1278.185006] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:36 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_nanosleep(0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8802, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x1, 0x26c, [0x0, 0x20001000, 0x20001030, 0x2000123c], 0x0, 0x0, &(0x7f0000001000)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x19, 0x0, 0x0, 'vcan0\x00', 'erspan0\x00', 'bridge_slave_1\x00', 'ip6tnl0\x00', @link_local, [], @dev, [], 0x194, 0x194, 0x1dc, [@comment={'comment\x00', 0x100}]}}, @common=@log={'log\x00', 0x24, {{0x0, "46aefdc2eedaf8ff6fcbbfa67ee31e6bfa4cf9f0761ffdac96c7d300bc1d"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x2bc)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={<r2=>0x0, 0x40}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x4, 0x3f2, 0x8000, 0x4c, 0x8, 0x3f, 0x80000000, 0x7, r2}, 0x20)

19:41:36 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010700000072d907000f510007140028", 0x22)

[ 1278.227974] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000003000080"], 0x0, 0x0, 0x0})

[ 1278.280264] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:36 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000000000)={0x2, 0xf41f, 0x401})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1278.343788] binder: 2296:2297 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1278.343805] binder_alloc: 10471: binder_alloc_buf size 549755814656 failed, no address space
[ 1278.361750] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1278.372802] binder_release_work: 38 callbacks suppressed
[ 1278.372808] binder: undelivered TRANSACTION_ERROR: 29201
19:41:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x100000000000000, 0x0})

19:41:36 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010800000072d907000f510007140028", 0x22)

[ 1278.413169] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1278.455524] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:36 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1278.520226] binder: 2306:2307 transaction failed 29201/-28, size 0-549755814656 line 3035
[ 1278.525363] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1278.551632] binder: undelivered TRANSACTION_ERROR: 29201
19:41:36 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000900000072d907000f510007140028", 0x22)

19:41:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000005000080"], 0x0, 0x0, 0x0})

[ 1278.606473] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:36 executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0x79})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r0, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

[ 1278.668999] binder: 2315:2316 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1278.723755] binder: undelivered TRANSACTION_ERROR: 29201
[ 1278.731627] binder_alloc: 10471: binder_alloc_buf size 549755815168 failed, no address space
19:41:36 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:36 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x200000000000000, 0x0})

[ 1278.767577] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1278.782111] binder: 2328:2330 transaction failed 29201/-28, size 0-549755815168 line 3035
[ 1278.860026] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1278.868762] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1278.885252] binder: undelivered TRANSACTION_ERROR: 29201
[ 1278.949186] binder: 2337:2341 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1278.976635] binder: undelivered TRANSACTION_ERROR: 29201
[ 1281.065567] IPVS: ftp: loaded support on port[0] = 21
[ 1281.290756] chnl_net:caif_netlink_parms(): no params data found
[ 1281.317031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1281.323659] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1281.330986] device bridge_slave_0 entered promiscuous mode
[ 1281.456598] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1281.463431] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1281.470588] device bridge_slave_1 entered promiscuous mode
[ 1281.480899] IPVS: stopping backup sync thread 10684 ...
[ 1281.495073] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1281.505406] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1281.514154] device bridge_slave_1 left promiscuous mode
[ 1281.519804] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1281.549652] device bridge_slave_0 left promiscuous mode
[ 1281.555129] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1285.220962] device hsr_slave_1 left promiscuous mode
[ 1285.274638] device hsr_slave_0 left promiscuous mode
[ 1285.342281] team0 (unregistering): Port device team_slave_1 removed
[ 1285.355247] team0 (unregistering): Port device team_slave_0 removed
[ 1285.365561] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1285.403271] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1285.492397] bond0 (unregistering): Released all slaves
[ 1285.613462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1285.621053] team0: Port device team_slave_0 added
[ 1285.626366] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1285.633557] team0: Port device team_slave_1 added
[ 1285.638707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1285.645994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1285.721703] device hsr_slave_0 entered promiscuous mode
[ 1285.769208] device hsr_slave_1 entered promiscuous mode
[ 1285.809760] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1285.816652] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1285.831564] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 1285.859146] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1285.866803] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1285.875758] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 1285.883789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1285.891304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1285.901724] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1285.907794] 8021q: adding VLAN 0 to HW filter on device team0
[ 1285.917683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1285.925228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1285.933410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1285.941287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1285.947718] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1285.954890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1285.963444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1285.973505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1285.982123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1285.990384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1285.997932] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1286.004414] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1286.011407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1286.021782] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1286.082761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1286.092369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1286.099366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1286.107089] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1286.115188] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1286.145400] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1286.168668] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1286.184809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1286.197111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1286.210651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1286.218717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1286.232644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1286.254023] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1286.274703] 8021q: adding VLAN 0 to HW filter on device batadv0
19:41:44 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000a40)=ANY=[], 0x0)
io_setup(0x80, 0x0)
ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0)
r1 = dup2(r0, 0xffffffffffffffff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x24}}})
r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000180)={0x7, 0x1, 'client0\x00', 0x0, "0a0d91ff513e9490", "68b54d2cba51b2492106be10c2bbde33ffbcff5d872b146467c395dfe9e94978"})
add_key(0x0, &(0x7f0000000880), &(0x7f0000000980), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x6c000000, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000106000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00626f6e64000000160c00020008001200040000009905f98882182476568b7005caac8f76ade118d1c9014f4e6c12516b6213458711278e5abe2c386108b16d5fcacce299f66311ed8f71bb70f4599388ca8bf4b70bda2c04b541909f5d8271f6eb5bd6be"], 0x3c}}, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)

19:41:44 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010900000072d907000f510007140028", 0x22)

19:41:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0)
ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000001040)={"55712200fa5135fd526af6b9ca99b8991c88b83e5e35edbb539fbc4b1149c4c72843eaf3b7c9bdf880bb3b8eff7a69e0b459fa45b87f854fad7af08715b666dabc8b82dd30eb35c50193861d1d6f920a37c87f110de6a2bf69e5b811a3432e3a526fd502e22e191611d9570570f71d42a1586362e5367d9c3f08cde9dba8bc8fd7492dad0b3e3d067e7da64fa3800d51f3db7d76b0fc1a8cfd332883e316d53fcb2f863389a92b2b2c8bbe3f73ebf4bca077a0b0d8fe1a8c089a04536668b9610ce8b78233b576236f5e6b032cc9b5b3f25bafafe321292a263199e53c30f9d5c1f7097adaba7464ce47b223d9f9e78a41a3c94254decc66de508e1bb22dcfb8e7ec11722716a56e18eadd2f694c70f90aa56d4aaf2804438254e7d4cf0b8feb6203d07a6e125512b0aebdb83e3770bffcc063939e0e7b721c3d6868c5a0d5fb58e824eaa3c894321ce7ad51e97a577be15199aea7afe0b609a6bcdbc8de8981c9a8e836a4a3ca31db013d591c3e5a5c3b5540e50d0f88c7d5d63cc72516c5cdbcb5cfe4375c4032420fd1d5c2b61f82b36e031b0141e2546fbed056d59e0c9b4ee0b5a806684d0a38521750ea6b385b06a1a82e1cefdb13618abbcad70df87226cc8f5d5ae0a398f33e4061aaf30354dc19fbf4e870d1ccb05f69f3d29e44979bc57cc6f4b6afdaae37c03581596c22ec698ad4201de2cf84ae3827e3bbafcf030ba3912a6e781f68d4f0d1a91be198f24d9cf4bdbd4650089c25e33c9bbc57424e97e7b7092aba86e68c50f1aec6334abfc6cbc2fbed1c538aaf8744186fe205697aedd5ac23a087f7983b1e8da9b4eb69d3cbbc0ab79f59678de00e1271acec035194ffdcac3321006087748078a60982e6476c915f1ed0984d4fa2e006829f2648f8aeca07098310653b428ef67a27b6fa8763bcabedac3396e78b2891db0e354b34063706e4e8f6dbedc667a84364cef2c28fa827b6eff164ba9418a58bcbdca38a5c3606ececb9902cc1f44f99cb8a2e7594d87ce2a0c0271c096783da9d0ac7073326764f4957af0c74e0f03872193b2cc20f43ac0dd6bba34c57993752729c137e4b490e5a43eeac13d7774f47a3bc7c8f45fa80b96d27563a627dee80aacfcfa933e0b5af749f52adf14fafb3f1fe7b09e13351eb1fcbc981eb84882a5439a185365fbc6305ae88802ba3b186ceabcfcba21202f015124a68ee4691a0fddcfbe16279cf893796f72c7e0b7b525a4d01bc04202f8808d52f92036bdaaad9fc5559c1a30fcd8e508c8612a0034203bae6072a3d2446eb792bdc178a4e624ba19e50f8efc8d45a858061e2a3722da7e4f2e3e7ee108aa5d1a3cc4fe871eb4c0496665ada03b82d4a80f9ef75e1e00bc1b199e5fedcc32880b54287c10b4f9a6e66d1d40abff27295e9d228ea3749a025c948157ae60d1aae84ab807c3f"})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r3, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

19:41:44 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000006000080"], 0x0, 0x0, 0x0})

19:41:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x300000000000000, 0x0})

[ 1286.417233] __nla_parse: 6 callbacks suppressed
[ 1286.417243] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1286.432115] binder_alloc: 10471: binder_alloc_buf size 549755815424 failed, no address space
[ 1286.467167] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1286.489203] binder: 2358:2359 transaction failed 29201/-28, size 0-549755815424 line 3035
[ 1286.497634] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1286.510362] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1286.525238] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1286.535230] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1286.553347] binder: undelivered TRANSACTION_ERROR: 29201
19:41:44 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000a00000072d907000f510007140028", 0x22)

19:41:44 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1286.579107] binder: 2355:2357 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1286.607191] binder: undelivered TRANSACTION_ERROR: 29201
19:41:44 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x400000000000000, 0x0})

19:41:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000007000080"], 0x0, 0x0, 0x0})

[ 1286.670388] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1286.756881] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1286.772127] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:44 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010a00000072d907000f510007140028", 0x22)

19:41:44 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x80000100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000001040)="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", 0x7f4a104a4e462837, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1286.829177] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1286.845300] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1286.888242] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1286.895505] binder_alloc: 10471: binder_alloc_buf size 549755815680 failed, no address space
[ 1286.925003] binder: 2374:2375 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1286.969126] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1286.987819] binder: undelivered TRANSACTION_ERROR: 29201
[ 1287.016581] binder: 2378:2379 transaction failed 29201/-28, size 0-549755815680 line 3035
[ 1287.060797] binder: undelivered TRANSACTION_ERROR: 29201
[ 1288.597250] IPVS: ftp: loaded support on port[0] = 21
[ 1288.671503] chnl_net:caif_netlink_parms(): no params data found
[ 1288.708477] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1288.714998] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1288.722334] device bridge_slave_0 entered promiscuous mode
[ 1288.729575] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1288.735979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.743357] device bridge_slave_1 entered promiscuous mode
[ 1288.749996] device bridge_slave_1 left promiscuous mode
[ 1288.755458] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1288.810028] device bridge_slave_0 left promiscuous mode
[ 1288.815775] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1288.953662] device hsr_slave_1 left promiscuous mode
[ 1289.014574] device hsr_slave_0 left promiscuous mode
[ 1289.074002] team0 (unregistering): Port device team_slave_1 removed
[ 1289.085737] team0 (unregistering): Port device team_slave_0 removed
[ 1289.096229] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 1289.133260] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 1289.215425] bond0 (unregistering): Released all slaves
[ 1289.323801] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 1289.333824] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 1289.348542] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 1289.356790] team0: Port device team_slave_0 added
[ 1289.362445] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 1289.370038] team0: Port device team_slave_1 added
[ 1289.375193] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 1289.382539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 1289.431708] device hsr_slave_0 entered promiscuous mode
[ 1289.469450] device hsr_slave_1 entered promiscuous mode
[ 1289.519722] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 1289.526785] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 1289.545539] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1289.551938] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1289.558503] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1289.564884] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1289.597719] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 1289.604866] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1289.614289] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 1289.682855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 1289.689448] 8021q: adding VLAN 0 to HW filter on device team0
[ 1289.695534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1289.703524] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1289.711024] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1289.718632] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 1289.730889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 1289.740935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1289.751440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1289.759494] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1289.765841] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1289.774756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 1289.782700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1289.791548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1289.799454] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1289.805808] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1289.816190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 1289.823712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1289.834878] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 1289.842354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1289.853493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 1289.862993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1289.871560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1289.888732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 1289.896243] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1289.910071] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1289.918006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1289.934453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 1289.942386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1289.950840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1289.962168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 1289.969767] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1289.977430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1289.987446] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 1289.993832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1290.010971] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 1290.022667] 8021q: adding VLAN 0 to HW filter on device batadv0
19:41:48 executing program 1:
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)

19:41:48 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:48 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000b00000072d907000f510007140028", 0x22)

19:41:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x500000000000000, 0x0})

19:41:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000012000080"], 0x0, 0x0, 0x0})

19:41:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$sock_int(r1, 0x1, 0x3, &(0x7f00000000c0)=0x1ff, 0x4)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000180)={0x79})
r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8000, 0x0)
inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x8)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r4, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000400)=0xe8)
sendto$packet(r3, &(0x7f0000000200)="bc664a8639de3cf199b828b2826cae1bd392e8d64dcae942050be6bea6151459c6de5937b69a70a5bf5047ddf79a7c1594a4f6f5a56cbcf190922bcac41bdf2697b885cb75b835175ea90797482f623a9392d38f90767f3be4cf901b0f11ea2c462445f6f2f4d2947128c578ab9b067ded61ff7115082803707ca1ef81ed2863c2443801e9c24a21d2237dc1b6f3895a20126404f86c95d52c004ff963dce80874eb53c3e00d0beb51eabcc6096e63dfbcbeb40f7d7c7c85feef09454b632942cfb909a515284a4c96eed9167eafe716d839cd185465cf84d1deb6ca49e9c425db52e12afb04af", 0xe7, 0x0, &(0x7f0000000440)={0x11, 0xf5, r5, 0x1, 0x283, 0x6, @dev={[], 0x18}}, 0x14)
add_key$user(0x0, 0x0, &(0x7f0000000580)="d8b98318b88de5636ad1a6da820065294787d16a63d50420019952e8f06a18a3c04f37e30b2fb760f6590a86fbb61b8e5863fc4b5cf2ab412922d63418b4a752b7a852508eac7f32899568ee242c8cb615d79341c68e97208da02d2f8b0f1b3c77de0442e0c3c3bcde1bfd8cc90b5e13db38ef64ed7156ae2989168cca0a533ce721f2daebc035835f32513c3147bbe6ca6d920e59753727a0f0b5e99528983590783f7aab76e996793f415a7b13e7be1ba7926245db63453ff642bc6a2844966df1f9e22db7b39e1901e2308153b4e7d7858450d23c4f0034488eb955003054f5316d78544679685f614af106afc26923365e7e52c98c91dcb9c2402c5f8ca3148347180aac5d35b0377faff0174537fae2cc1f86bab0bfea865c076741e624f870ec3b90e16070f337254e9c7dd6208306415cf780e821cad2777c0c23a5abc3f960d2afee5574268507ba7a1b491b5ca4c99cbe7417de00586ddf78e99d590aa8f18830c01e6e83721b4bb52499313567c106f31f9f7f524ed7ba509b07d1456d835dc1362b488ad06a31b35bac766ba49c95157fcc8590ec25294d285064914fbc61202780fff7df7eeba1fff8ce4dcd629268d53dcf3469f76eeb017b4b5e55273bee4c2a1c71666245d20a0a794aee31e691762ba4f9897c9d122b1c2c67d385583e0d65df728df745e9743b11314c097316be60426dcbcdd9db9d34253314beed39500cb2347f1c9b85d62c4e21f177430629cde1f720a65db49985802a217cb41389e7cd5f8a4294fa5801f099576df5c7df25cd7e157f95292e73820319ad6eb4c23c54a7c27c6dadb0ce4ce25ad039588cef69f3dea447fb67dd22d4e0bd8229a3d881b0a732efe0dd13e4e0db13545d34e02007d55a0cb6cdc85a816c4acc35aa7f96d95cd5d3716c2a5f3442b9df4f6d77546a610482e55bae641ebef42a4295b2551af9db4a55dadf653b259082efb7470da0240e09fabc3b70ac520f43562b921beb32f5c179491456844db914ac44fa54a688f32d502547f29b3dc81da7c6fa8ad74ac6ade5cd12e699fae2dece753505d028768c6d82aacb8a71c7b5eaff54d9a9773b86c4c96d993f1bd4a5fab9c8e7e2da5028b168805c06ae714ff1628a1b16ed4397952badf62207cfc23b4047842ec8068644ec9797b9619800384153190e6902a9cd62e6b180db5043f3b6c19fa0738d945e419fd805a000433cda63c2080caf9a30c7010b55cc17a336bea4d4572d23f7898cee4b60c2c8424d1ecc4a6951d8e1f61718ed58951468cea5e19eda711b7f9e2f760b09e75ab29e5973b3ad88d85433f233e90e2cadc1420e26cb7fbc6fc42d94ed71d86e580363f5abe469c3ed465d801a5ac407ab7b4bd88c852410b9a689fc9bb29637d3de9d734b8b77fc7313d53631a436555b02064e742ce54e13178b6650f799ec042f8a27cf8943791c114a680eb9a6f400644ff3b907b20bbc0e91ce43b8877101651c255ec1705e786354cd94e8308c07af5d5741fda80d332d0cd03dde432c7be6819b82b450fca2e2247912caab774fd15044f488982a04887ff9b008a3f71e576dc198b9bf47d1422ee4c2c9f9815513cd23a8c24d4ba1a9f231b89b62c3c2de835c8b22ead7c24d25fd0ef1650e307d048973730ce5bfae249314ac2591dd6df5bd0ed57d7fb917e67c514becc66a845676db235ae078b93146d713c521810bf5232e2da1dac82591f5ee6ede223a8dade38c84403f965fb387df4f9d7de6fbe8c32df7e629939f013761ba708a6215734fc966845246c9edb49b6dc9c7d84bba4d5c1550f3570ed3c7d7fd49a8305a5a1c42bbbc393a965b5fbf92076009ada94a475f8fa5390c33d8c0def5508fa92b16b0350c370c5d3066b42ee2126bd525925c12251f9aa0afb69cc7500ae165e5d5750463774590a580c9df8f227b186de5909dffd4b1c852ec92ef23789c191135a87b93107082abaf41c9786ad14775573fbeb091e336d59f28daa33286fd1ecae0baebf05d073abc95c753fd0e68bf58a281dc0f8f8c100b45948776d5d123b65daf490a141858855456ecec09a65fb939e330097aa88033522ce0dcc5b7c99af7865bc5d252b27f414e31a76487ac792df5d619218d76cb7438e5b1e6b5a0c961086901a832ce78426aa1cb3d016ee70377ee5ca679bb219eaa9a77881a59e019dcd1c0b785a2c139af6ba1ac93500600ac7fa980971676ba8499b3db548535d06c70494cc209cf8a5716c82f2c1c77a12731804ae294620bea843e1571249abe41603836250700ad36b454396c8cb55fb97d80898ff8b43a70d38f86cb0c27ec42a9bbe2429795a41a6125deb83f6ff619da0b73c44f409771557f1a2e9eb754e7cbe3beef06127e6c071e180799a17f31b68ed382804d86403fa2cf5fadb4e13bace1970f85c014e98ca6cd4292bc6f1df71a4d42fd1b4f4dd842ffd7ca077c872fd1b36dda38cfb5f0a2ba481354bde15d1d13f750c071a75d612469111fed3adb95c746208a7799cac21edb73af9fde8723188fae20c32e300c5094784a0b5d586615d8c0933563cb1b827d3e880ebbb699e5497b913017d1a62f5977dc8a41eb1509331ef6c6570180aec318b22db79604e84df96a89fae278dea37ce6dd267a7749389630d0d4b15c89cfbf80af0f35b8460aeddefef6dee4ae9488ce711bf2b716e4efb84642d0dd3d2f1654867ce8e2c8161a58749a6bf0ce09cfefa40350e669a42b046e7984c1553fc0fbc97a0665846ea5a3d9ce77e983fedd0fa5e3a8fb1e79024a2c1662babb3c23ea04240f5daae9fc18b0376128c0de783b37032d679cf8f13ee4c7b8aa89752e09c52c181207890d031372e776a0d913f40ea8d2bb244eb4e588c4a56bcae4c2b4a0ca496a21d751661eff0f9f934292d05ee8e99b3b71140377b01a3ab2af4db12d3b67d30f960b12c0154091d34b17350e698088ec97c9bddf61be362edbd3a4d2615a0da37ffe932fab09e8364e8d7abb96b93e36b7c63cd52bc620794c8a7f5dcc8221f1055a35da6a4c3977e2afd95c80d0ed3ee9cb268d69988a78ff9a897af0c5734f2d5aa93ce0f5ab31c265e6c0f7c534a4d1e6a4b08a629a1ceb817117d6839bc8fd0636eef3b8993379d97f3d2ab23d8b8c6f52d98d23b0550fb43cc92263318b172d3cba00a6e986c7633180fa9cf29f427fa132115c3fe1ff4e6f55110ea12bec3889b03a47d2d8272c83f19110d7010e9b8c701a90ff7e3a7a9326c537a63da59b3b25c86674ca7898a3ef4dabe179a798654faaa6dde226ff02ed550237dd398d63514ff21a117cb6c9385d0c1b40eacedac7b0b8fad9e7a0d4176b8794803c583a643cc3e3a03ffbc1dfadf62253c409762cf96d27c4a9fe2c5942b9d1cee5d78a6b063716b4f19695ddb63398f9b1988f99a686ceb7b56bbd94131ab636b97afb3e5f10c7e4efdc25cb6606cea66e2320013e61a36f4a75929d57fbae829e3c709f9203403d98d15e97914dccd45f2dd60b9f504168f2fa888f72e3f947796a6d49b872d245dede2558bcda7a167acf747f8adde3199c1ceaae69dc6408b99bf33b9d012b49b1eff372a5f7774557f0a70335fc9d119922f6fdf8f69546a7b2755be70313fe5b4a1f76cfc0551f3ff0c851888221b10fb6ea83ffaa56ca75bf489db1d366bc5b6136051bbd9f30cf77722b09fa7b8f40867cf6516f14a44deee14daf2759d3eddcaf7dea26ace23522e1fe09a88ec762f39c8b281718faa52a28763c99016a577a5c1443ddf543e2e84e3a8640", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[ 1290.137701] binder_alloc: 10471: binder_alloc_buf size 549755818496 failed, no address space
[ 1290.152400] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:48 executing program 1:
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000001c0)={[], 0x0, 0xffff, 0x409})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

[ 1290.199000] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1290.214938] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:48 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010b00000072d907000f510007140028", 0x22)

[ 1290.259474] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1290.268443] binder: 2404:2405 transaction failed 29201/-28, size 0-549755818496 line 3035
19:41:48 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1290.319463] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1290.328800] binder: 2408:2412 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1290.365175] binder: undelivered TRANSACTION_ERROR: 29201
[ 1290.377448] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:48 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:48 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000200)={{0x0, 0x3001, 0x9, 0x1, 0xc9c8, 0x800, 0x2, 0x1, 0x4, 0x2, 0x6, 0x9}, {0x101000, 0xd000, 0x0, 0x6, 0x800, 0xc9, 0x101, 0x8001, 0x3, 0x3f, 0x6, 0x3ff}, {0x0, 0x4, 0xa, 0x2, 0x3ff, 0x258, 0x2, 0x800, 0xb8f8, 0x3ff, 0x1f, 0xfffffffffffffeff}, {0xf000, 0x110004, 0xf, 0x1f, 0x1, 0x51a8, 0x1, 0x2, 0x100, 0x0, 0x0, 0x3}, {0x10000, 0x5000, 0x3, 0xfffffffffffffffe, 0x8001, 0x100000000, 0x3ff, 0x1, 0x2, 0x3ff, 0xffffffffffffff81, 0x6}, {0xd000, 0x4, 0xa, 0x8, 0x9, 0x80000000, 0x4, 0x6, 0x3, 0x756c, 0xfffffffeffffffff, 0x8c60022}, {0x0, 0x2, 0x0, 0x1000, 0x5, 0x1, 0x40, 0xcec, 0x4, 0x3ff, 0xffffffffffffffc1, 0x5}, {0x2, 0x1000, 0xe, 0x2, 0x3, 0xed7, 0xd6, 0x9, 0xf55d, 0x8, 0x0, 0x99}, {0x5004, 0x112000}, {0x2, 0xf000}, 0x40010008, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [0x6, 0xffffffff, 0x8, 0x3]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x9, 0xfff, 0x300c, 0x3, 0xf, 0x4, 0x2, 0x3}})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19:41:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000020000080"], 0x0, 0x0, 0x0})

19:41:48 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000c00000072d907000f510007140028", 0x22)

19:41:48 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x600000000000000, 0x0})

[ 1290.533373] binder: undelivered TRANSACTION_ERROR: 29201
[ 1290.560916] binder_alloc: 10471: binder_alloc_buf size 549755822080 failed, no address space
19:41:48 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000005f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1290.619943] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:48 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010c00000072d907000f510007140028", 0x22)

[ 1290.674584] binder: 2437:2441 transaction failed 29201/-28, size 0-549755822080 line 3035
[ 1290.690840] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1290.736165] binder: undelivered TRANSACTION_ERROR: 29201
[ 1290.753748] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
19:41:48 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000d00000072d907000f510007140028", 0x22)

19:41:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000003f000080"], 0x0, 0x0, 0x0})

[ 1290.779337] binder: 2450:2451 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1290.896608] binder_alloc: 10471: binder_alloc_buf size 549755830016 failed, no address space
[ 1290.896816] binder: undelivered TRANSACTION_ERROR: 29201
[ 1290.929995] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1290.951650] binder: 2462:2465 transaction failed 29201/-28, size 0-549755830016 line 3035
[ 1290.978643] binder: undelivered TRANSACTION_ERROR: 29201
19:41:49 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f00000001c0)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0xffffffb2)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x98c})

19:41:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2, 0x11, r2, 0x0)
add_key$user(0x0, 0x0, &(0x7f0000000580)="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", 0xa81, 0xfffffffffffffffe)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x38200, 0x0)
ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000080)=""/56)

19:41:49 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000015f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:49 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010d00000072d907000f510007140028", 0x22)

19:41:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x700000000000000, 0x0})

19:41:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000040000080"], 0x0, 0x0, 0x0})

[ 1291.777502] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1291.786854] __nla_parse: 9 callbacks suppressed
[ 1291.786865] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1291.805432] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1291.816576] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1291.826643] binder_alloc: 10471: binder_alloc_buf size 549755830272 failed, no address space
[ 1291.836197] binder: 2476:2477 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1291.846540] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1291.859062] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:49 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
read(r0, &(0x7f0000000200)=""/11, 0xff06)
prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffc90)
prctl$PR_GET_TIMERSLACK(0x1e)
syz_execute_func(&(0x7f0000000080)="3666440f9bf56664400f9f3241c3c46269a67f00c4c3654c69000b3e0f11581010196f04cd04cd0f2902")

19:41:49 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000e00000072d907000f510007140028", 0x22)

[ 1291.879393] binder: 2483:2484 transaction failed 29201/-28, size 0-549755830272 line 3035
[ 1291.880474] binder: undelivered TRANSACTION_ERROR: 29201
19:41:49 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xa00000000000000, 0x0})

[ 1291.929325] binder: undelivered TRANSACTION_ERROR: 29201
19:41:50 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000060000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000048000080"], 0x0, 0x0, 0x0})

19:41:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10207, 0x3, 0x6, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
pwrite64(r0, &(0x7f0000000240)="20d763e008a4d7858e9f034a1c181810f6df07ce550e09cf3f343a1032cd3d765d93ba9fbb3af15b21297d700e191c940fbd2f72756f0f831c6e151cd3cd9c445eee5b3d98e8624ffa4e7b516253bb0e6dcb663a573588a964820cb746456fc707b624303f6f51314f8db54f003de70772bceab8e8cf06884d6db2c86e801f41c72a8a3e7e852d646adc72292220627747ca", 0x92, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000180)={0x79})
r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000000140)={0x0, {0xfd, 0x1}})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x14, r3, 0x10000000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x6, 0x8, 0x10000, 0x5, 0x0, 0x200, 0xffffffffffffff7f, 0xffffffff, 0x5, 0x8, 0x3ff, 0xfd0, 0xfffffffffffff14d, 0x7, 0x9], 0x0, 0x400})
add_key$user(0x0, 0x0, &(0x7f0000005200)="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", 0xfea6, 0xfffffffffffffffe)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1292.045681] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1292.084183] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1292.100414] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:50 executing program 1:
unshare(0x400)
r0 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

19:41:50 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010e00000072d907000f510007140028", 0x22)

[ 1292.157048] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.170221] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1292.215953] binder_alloc: 10471: binder_alloc_buf size 549755832320 failed, no address space
[ 1292.237961] binder: 2500:2501 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:50 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x2000000001, 0x2, &(0x7f0000000000)=0x80ffff})

19:41:50 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0)

[ 1292.262900] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.284925] binder: undelivered TRANSACTION_ERROR: 29201
19:41:50 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000160000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x1200000000000000, 0x0})

[ 1292.319134] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1292.349461] binder: 2508:2509 transaction failed 29201/-28, size 0-549755832320 line 3035
[ 1292.360097] binder: 2523:2525 ioctl 40046205 0 returned -22
19:41:50 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1292.386856] binder: undelivered TRANSACTION_ERROR: 29201
[ 1292.386887] binder_alloc: 10471: binder_alloc_buf size 549755832320 failed, no address space
[ 1292.394384] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1292.412111] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.429546] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1292.438384] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.447921] binder: 2508:2509 transaction failed 29201/-28, size 0-549755832320 line 3035
[ 1292.461725] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1292.464152] binder: 2534:2535 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1292.479612] binder: undelivered TRANSACTION_ERROR: 29201
19:41:50 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000c00e00000072d907000f510007140028", 0x22)

19:41:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000080"], 0x0, 0x0, 0x0})

19:41:50 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:50 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x2000000000000000, 0x0})

[ 1292.497249] binder: undelivered TRANSACTION_ERROR: 29201
[ 1292.509121] input input26: cannot allocate more than FF_MAX_EFFECTS effects
19:41:50 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000061000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1292.600819] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1292.612647] binder_alloc: 10471: binder_alloc_buf size 549755833344 failed, no address space
[ 1292.654095] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.673468] input input28: cannot allocate more than FF_MAX_EFFECTS effects
[ 1292.687218] binder: 2553:2554 transaction failed 29201/-28, size 0-549755833344 line 3035
19:41:50 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xdffffffffffffffe, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r0, 0x5385, &(0x7f0000000180))

19:41:50 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:50 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000f00000072d907000f510007140028", 0x22)

[ 1292.696056] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:50 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000161000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1292.733897] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.757724] binder: undelivered TRANSACTION_ERROR: 29201
[ 1292.783503] input input29: cannot allocate more than FF_MAX_EFFECTS effects
[ 1292.800903] binder: 2556:2557 transaction failed 29201/-28, size 0-549755813888 line 3035
19:41:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000060000080"], 0x0, 0x0, 0x0})

19:41:50 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000010f00000072d907000f510007140028", 0x22)

19:41:50 executing program 1:
setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4})
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

19:41:50 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000062000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1292.836376] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:50 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1292.897062] binder: undelivered TRANSACTION_ERROR: 29201
[ 1292.904528] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1292.921904] binder: 2556:2557 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1292.969479] binder_alloc: 10471: binder_alloc_buf size 549755838464 failed, no address space
[ 1292.989658] binder: undelivered TRANSACTION_ERROR: 29201
19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011000000072d907000f510007140028", 0x22)

19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x3f00000000000000, 0x0})

19:41:51 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000162000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:51 executing program 1:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setrlimit(0x8, &(0x7f0000001240)={0x1, 0x4})
mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000)

[ 1293.017185] binder_alloc: allocated: 944 (num: 103 largest: 32), free: 11344 (num: 1 largest: 11344)
[ 1293.041847] input input30: cannot allocate more than FF_MAX_EFFECTS effects
[ 1293.048238] binder: 2586:2587 transaction failed 29201/-28, size 0-549755838464 line 3035
19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1293.117555] binder: undelivered TRANSACTION_ERROR: 29201
19:41:51 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
select(0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x24)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x0)

19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4800000000000000, 0x0})

19:41:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000068000080"], 0x0, 0x0, 0x0})

19:41:51 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000063000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001100000072d907000f510007140028", 0x22)

19:41:51 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000040)=0x6, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000003c0)=0x3, 0x4)
sendmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000002d40), 0x2bc}}, {{0x0, 0x0, &(0x7f0000000040), 0x361, &(0x7f0000000140)}}], 0x40007aa, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1293.300171] input input31: cannot allocate more than FF_MAX_EFFECTS effects
19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x4c00000000000000, 0x0})

19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011100000072d907000f510007140028", 0x22)

19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000006c000080"], 0x0, 0x0, 0x0})

[ 1293.400083] input input32: cannot allocate more than FF_MAX_EFFECTS effects
19:41:51 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000163000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:51 executing program 1:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
prctl$PR_SVE_SET_VL(0x32, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0)
ptrace$cont(0x18, r0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0xc)
ptrace$cont(0x1f, r0, 0x0, 0x0)
tkill(r2, 0x30)

19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001200000072d907000f510007140028", 0x22)

19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6000000000000000, 0x0})

[ 1293.513016] input input33: cannot allocate more than FF_MAX_EFFECTS effects
19:41:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000074000080"], 0x0, 0x0, 0x0})

19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:51 executing program 1:
mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x3)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000180)='./file0\x00', 0x23f)
getgroups(0x7, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, <r0=>0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff])
chown(&(0x7f00000001c0)='./file0\x00', 0x0, r0)
setgroups(0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
setuid(0xee01)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getsockname$inet(r1, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
r2 = semget$private(0x0, 0x7, 0x0)
semctl$GETNCNT(r2, 0x0, 0x3, &(0x7f0000000000)=""/191)

19:41:51 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000064000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011200000072d907000f510007140028", 0x22)

[ 1293.658840] input input34: cannot allocate more than FF_MAX_EFFECTS effects
19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6800000000000000, 0x0})

19:41:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000007a000080"], 0x0, 0x0, 0x0})

19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:51 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001300000072d907000f510007140028", 0x22)

19:41:51 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000164000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:51 executing program 1:
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e5e2)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@dev, @in=@remote}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000340)=0xe8)
ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0)
get_robust_list(0x0, &(0x7f00000009c0)=&(0x7f0000000a80)={&(0x7f0000000a40)={&(0x7f0000000a00)}}, &(0x7f0000000b00)=0x1)
getresuid(&(0x7f0000000400)=<r2=>0x0, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000540))
getresgid(&(0x7f0000000580), &(0x7f00000005c0)=<r4=>0x0, &(0x7f0000000740))
fstat(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
getgroups(0x6, &(0x7f0000000800)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff, 0x0, 0xffffffffffffffff])
lstat(&(0x7f0000000840)='./file0/bus\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x2, &(0x7f0000000900)=[0x0, <r8=>0xee00])
fsetxattr$system_posix_acl(r0, &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000940)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x4, r3}], {}, [{0x8, 0x4, r4}, {0x8, 0x4, r5}, {}, {0x8, 0x1, r6}, {0x8, 0x4, r7}, {0x8, 0x7, r8}], {0x10, 0x2}, {0x20, 0x1}}, 0x64, 0x2)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="00e53a867e00fedbdf2502000000"], 0x1}}, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0)
r9 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x6857b21ff1155d90)
futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}})
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000016c0))
fcntl$lock(r9, 0x7, &(0x7f0000027000)={0x1})
r10 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchdir(r10)
r11 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$binfmt_aout(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="5798e5a7"], 0x4)
getpgrp(0xffffffffffffffff)
sendfile(r11, r11, &(0x7f0000000180), 0x8000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_INFO(r10, 0x29, 0x40, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r10, 0xc0184908, &(0x7f0000000380)={0x0, 0x0, 0x0})

19:41:51 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x6c00000000000000, 0x0})

[ 1293.879416] input input35: cannot allocate more than FF_MAX_EFFECTS effects
19:41:51 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180"], 0x0, 0x0, 0x0})

19:41:52 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011300000072d907000f510007140028", 0x22)

19:41:52 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000065000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7400000000000000, 0x0})

19:41:52 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:52 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001400000072d907000f510007140028", 0x22)

[ 1294.087744] input input36: cannot allocate more than FF_MAX_EFFECTS effects
19:41:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280"], 0x0, 0x0, 0x0})

19:41:52 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000165000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x7a00000000000000, 0x0})

19:41:52 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:52 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005865000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:52 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011400000072d907000f510007140028", 0x22)

19:41:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380"], 0x0, 0x0, 0x0})

19:41:52 executing program 1:
socketpair$unix(0x1, 0x20002000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000000a, 0x0)
write$binfmt_elf32(r1, &(0x7f0000001200)=ANY=[@ANYRESDEC=0x0], 0xfffffd64)
ioctl$int_in(r1, 0xc0000880045017, &(0x7f0000000180))

19:41:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0xfdfdffff00000000, 0x0})

19:41:52 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:52 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000066000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffff9c})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
fstat(r1, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480"], 0x0, 0x0, 0x0})

19:41:52 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001500000072d907000f510007140028", 0x22)

19:41:52 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:52 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:52 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:52 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000166000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580"], 0x0, 0x0, 0x0})

[ 1294.992703] binder: undelivered TRANSACTION_COMPLETE
19:41:53 executing program 1:
r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x4, &(0x7f0000000040)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000019c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000007c0), 0x33d}])

19:41:53 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011500000072d907000f510007140028", 0x22)

19:41:53 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:53 executing program 0:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2100)
ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000180))
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000080)=""/238)

19:41:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680"], 0x0, 0x0, 0x0})

19:41:53 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000067000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:53 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000167000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780"], 0x0, 0x0, 0x0})

19:41:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0})

19:41:53 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:53 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001600000072d907000f510007140028", 0x22)

19:41:53 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x2000000802, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x8)
socket$netlink(0x10, 0x3, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)

19:41:53 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000068000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1295.774258] input input40: cannot allocate more than FF_MAX_EFFECTS effects
19:41:53 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000168000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:53 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x800)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x280041, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x200, 0x0, 0x80000000, 0xaac, <r2=>0x0}, &(0x7f0000000100)=0x10)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xd5b)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x42, 0x9, [0x3f, 0x1f, 0xfffffffffffffffc, 0x6, 0x1, 0x8, 0x3ff, 0x0, 0x1]}, 0x1a)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000b1ea35a0af07d591f84edf3db8e6f1d05d9b7cb1be20193e23740ece0bf2b4e1fc29da673277e9ab02d78c65b22428db1adf58beb9d29ade1976a638970ca440392c21c8ea93bb7e2405235fead3001a5e5517a4ae78b6581227863b55a7a971dfb687b8afabd716de1bbfb11826690761ed3e8481e24cfa539540525c4c384281d211792f3d18db21812b3b5345"], 0x0, 0x0, 0x0})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f00000001c0)={0xbb0004, 0x4, 0xfffffffffffffffd, [], &(0x7f0000000180)={0x9c090c, 0x0, [], @value64=0x7}})

19:41:53 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011600000072d907000f510007140028", 0x22)

19:41:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280"], 0x0, 0x0, 0x0})

19:41:53 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:54 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x80000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:54 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000069000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1296.042710] input input41: cannot allocate more than FF_MAX_EFFECTS effects
19:41:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000002080"], 0x0, 0x0, 0x0})

19:41:54 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001700000072d907000f510007140028", 0x22)

[ 1296.134444] input input42: cannot allocate more than FF_MAX_EFFECTS effects
19:41:54 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
syz_emit_ethernet(0x300b00, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300004, 0x892f, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0)

19:41:54 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000169000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='timers\x00')
ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:54 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f80"], 0x0, 0x0, 0x0})

19:41:54 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011700000072d907000f510007140028", 0x22)

19:41:54 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c811b6b10f09f3b058f021a630000400000000000000000000080000000d60000000000000000006d"], 0x0, 0x0, 0x0})

[ 1296.716931] input input43: cannot allocate more than FF_MAX_EFFECTS effects
19:41:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004080"], 0x0, 0x0, 0x0})

19:41:54 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001800000072d907000f510007140028", 0x22)

19:41:54 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1296.814392] __nla_parse: 57 callbacks suppressed
[ 1296.814401] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1296.837294] binder: 2924:2925 unknown command 1796964620
[ 1296.855237] binder_alloc_new_buf_locked: 38 callbacks suppressed
19:41:54 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:54 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
write$binfmt_aout(r0, &(0x7f0000001000)=ANY=[@ANYRES64], 0xffffff8a)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x12})

[ 1296.855248] binder_alloc: 10471: binder_alloc_buf size 550829555712 failed, no address space
[ 1296.868267] binder: 2924:2925 ioctl c0306201 20000040 returned -22
[ 1296.899463] binder_alloc_new_buf_locked: 38 callbacks suppressed
[ 1296.899517] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1296.900851] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1296.922013] binder_transaction: 38 callbacks suppressed
[ 1296.922030] binder: 2926:2927 transaction failed 29201/-28, size 0-550829555712 line 3035
[ 1296.945194] input input44: cannot allocate more than FF_MAX_EFFECTS effects
19:41:54 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011800000072d907000f510007140028", 0x22)

19:41:55 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1296.967475] binder_alloc: 10471: binder_alloc_buf size 550829555712 failed, no address space
19:41:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffa2, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b814e0d0a01e4e675694267e049babd23ec6b09a0b4c37c0f738de8c0d3c45c2fc43389fade514036219124bbe9faad6c18bf038d800f0f75cfb2cb8ac8e5453878283c867e9c648227cd2e4f1a1c5d8994dd44a4841254ba9e036d759fa03b880ac943b410861747eeaf4450fbe849b0f3bd308df813acad9"], 0xffffffffffffff2b, 0x0, 0x0})
clone(0xa004a00, &(0x7f0000000080)="6f153a227a053da765b356d026dcd9eb1c07be7dd569ec2b68", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000300)="b6a295192f83097fc7528f98a373e140576030ce9a7c881a1012464ec9b358536c7995f451a56b22c13664")
r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x80000)
syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f0000000180)={0x5, @sdr={0x33424752, 0xfffffffffffffffd}})

[ 1297.009773] binder_release_work: 38 callbacks suppressed
[ 1297.009780] binder: undelivered TRANSACTION_ERROR: 29201
[ 1297.020266] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1297.039398] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1297.061088] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1297.077185] binder: 2944:2945 ioctl c0306201 20000040 returned -14
[ 1297.091195] binder: 2926:2927 transaction failed 29201/-28, size 0-550829555712 line 3035
19:41:55 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1297.126387] binder: 2944:2945 ioctl c0306201 20000040 returned -14
[ 1297.143405] input input45: cannot allocate more than FF_MAX_EFFECTS effects
[ 1297.151332] binder: undelivered TRANSACTION_ERROR: 29201
19:41:55 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001900000072d907000f510007140028", 0x22)

19:41:55 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1297.196356] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:41:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004880"], 0x0, 0x0, 0x0})

19:41:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1297.294133] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1297.339550] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:41:55 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:55 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011900000072d907000f510007140028", 0x22)

19:41:55 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1297.389276] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1297.409432] binder: 2963:2964 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1297.417988] binder_alloc: 10471: binder_alloc_buf size 550963773440 failed, no address space
[ 1297.443854] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1297.479377] binder: undelivered TRANSACTION_ERROR: 29201
[ 1297.489715] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1297.504314] binder: 2965:2966 transaction failed 29201/-28, size 0-550963773440 line 3035
[ 1297.526987] binder_alloc: 10471: binder_alloc_buf size 550963773440 failed, no address space
[ 1297.546145] binder: undelivered TRANSACTION_ERROR: 29201
[ 1297.552058] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1297.558945] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1297.580252] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1297.613724] binder: 2965:2966 transaction failed 29201/-28, size 0-550963773440 line 3035
[ 1297.658697] binder: undelivered TRANSACTION_ERROR: 29201
19:41:55 executing program 1:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
timerfd_gettime(r0, 0x0)

19:41:55 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:55 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x80040, 0x0)
ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000080)=0x3)
sync_file_range(r0, 0x8, 0x81, 0x2)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x8000, 0x0)

19:41:55 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001a00000072d907000f510007140028", 0x22)

19:41:55 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c80"], 0x0, 0x0, 0x0})

[ 1297.877281] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1297.899384] binder_alloc: 10471: binder_alloc_buf size 551030882304 failed, no address space
19:41:55 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"})

19:41:55 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:56 executing program 0:
r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2)
ioctl$RTC_WIE_OFF(r0, 0x7010)
ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0))
sendfile64(r0, r0, &(0x7f0000000240), 0x100)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000002a1d0000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000180)='\x00', 0xffffffffffffffff}, 0x30)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x8, &(0x7f0000000200)={0x7ff})

19:41:56 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1297.937768] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
19:41:56 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011a00000072d907000f510007140028", 0x22)

[ 1298.009082] binder: 2993:2995 transaction failed 29201/-28, size 0-551030882304 line 3035
[ 1298.041558] binder: BINDER_SET_CONTEXT_MGR already set
19:41:56 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1298.078546] binder: 3006:3009 ioctl 40046207 0 returned -16
[ 1298.084746] binder: undelivered TRANSACTION_ERROR: 29201
[ 1298.084811] binder_alloc: 10471: binder_alloc_buf size 551030882304 failed, no address space
19:41:56 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:56 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001b00000072d907000f510007140028", 0x22)

[ 1298.124530] binder_alloc: allocated: 952 (num: 104 largest: 32), free: 11336 (num: 1 largest: 11336)
[ 1298.143071] binder: 3006:3009 ERROR: BC_REGISTER_LOOPER called without request
19:41:56 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:56 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1298.173830] binder: 3009 RLIMIT_NICE not set
[ 1298.189071] binder: 2993:2995 transaction failed 29201/-28, size 0-551030882304 line 3035
[ 1298.193388] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1298.209061] binder: undelivered TRANSACTION_ERROR: 29201
19:41:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006080"], 0x0, 0x0, 0x0})

19:41:56 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011b00000072d907000f510007140028", 0x22)

[ 1298.245507] binder_alloc: allocated: 976 (num: 105 largest: 32), free: 11312 (num: 1 largest: 11312)
[ 1298.307752] binder: 3015:3016 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1298.344977] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1298.364962] binder: undelivered TRANSACTION_ERROR: 29201
[ 1298.371413] binder_alloc: allocated: 976 (num: 105 largest: 32), free: 11312 (num: 1 largest: 11312)
[ 1298.404566] binder_alloc: 10471: binder_alloc_buf size 551366426624 failed, no address space
[ 1298.413455] binder: 3015:3016 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1298.422975] binder: undelivered TRANSACTION_ERROR: 29201
[ 1298.445085] binder_alloc: allocated: 976 (num: 105 largest: 32), free: 11312 (num: 1 largest: 11312)
[ 1298.463751] binder: 3039:3042 transaction failed 29201/-28, size 0-551366426624 line 3035
[ 1298.477811] binder: undelivered TRANSACTION_ERROR: 29201
[ 1298.819274] binder_alloc: binder_alloc_mmap_handler: 3006 20001000-20004000 already mapped failed -16
[ 1298.828795] binder: BINDER_SET_CONTEXT_MGR already set
[ 1298.834726] binder: 3006:3017 ioctl 40046207 0 returned -16
[ 1298.834949] binder: release 3006:3017 transaction 13364 out, still active
[ 1298.840584] binder: 3006:3051 ERROR: BC_REGISTER_LOOPER called without request
[ 1298.848269] binder: undelivered TRANSACTION_COMPLETE
[ 1298.855213] binder: 3051 RLIMIT_NICE not set
19:41:56 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)=[@flat={0x73622a85}], 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"})

19:41:56 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:56 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:56 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001c00000072d907000f510007140028", 0x22)

19:41:56 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x220000, 0x0)
rt_sigaction(0x22, &(0x7f0000000540)={&(0x7f00000004c0)="36ff46090fa4d103c4c3f540fc68c4e1dd71e100d9fbf2afc4e119c611fe3ef2a526f2acc4c1b1616eff", {0x5}, 0x10000004, &(0x7f0000000500)="653e0fae08360fae0e2e0f0f3c0abfdbcf0fdc7700c4c28d9bc76464640f0d9f09000000c4c13259af32233333c4e101e0eb7b92"}, &(0x7f0000000600)={&(0x7f0000000580)="8fc928904d03c4e2e5a7c43636660f6e79078fe90001f00f381d5100c4e223f77b003e0f01dd660f38148a00008020670f79670bf701af000000", {}, 0x0, &(0x7f00000005c0)="260f38f10fc4e241aa6201dcf82e0f71d197660ffa9dc09a8766c4e261bb2fc4c2553a01c4e27d58d50f1bb4ac4f91000067362667660f71e28e"}, 0x8, &(0x7f0000000640))
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000300)={<r2=>0x0, 0xa1, "1e2e1108ace31450cc49de3bf6fe7ef28879f15055faacd8f65391305136aef0db7e113152037da734ff40b8db4be36fa7de19a07e9d8a1fbda87713315d5618bcbb3f4bb23b737cd6f7bc577fdb4284f2e12bd488d67b541ba20c1df6eaac60d29d3bec5a976a512c59751cec55554ff461cec762cfa6beda7a26fa2ef1c586d981e116bd715f0ffdfe6bc4789c71e09a5ccf556176876a88276b87172e000176"}, &(0x7f00000003c0)=0xa9)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000400)={r2, 0x6e, "2ed0e4c4b74a62ea7665ac9c5af787859c5b3b4c9db19bda56e148bb1641006a197c9b4a51f6dff7df3e8b2d21e0e75d3e767098ae22ad0a5174a4839393fc791a557cee9e4d8ea7ab5a91d4c32b605d741b3aa1c74dad97551b07494a0361753b238342a9be62ac0b07956cda67"}, &(0x7f0000000480)=0x76)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r3 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x800)
setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000240)={{0x3b, @multicast2, 0x4e24, 0x3, 'wlc\x00', 0x4, 0x40000000, 0x37}, {@broadcast, 0x4e23, 0x1, 0x3, 0x80000001, 0x81}}, 0x44)
lsetxattr$trusted_overlay_origin(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='trusted.overlay.origin\x00', &(0x7f0000000700)='y\x00', 0x2, 0x3)

19:41:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006880"], 0x0, 0x0, 0x0})

19:41:56 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1298.864897] binder: release 3006:3051 transaction 13369 out, still active
[ 1298.872145] binder: undelivered TRANSACTION_COMPLETE
19:41:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c80"], 0x0, 0x0, 0x0})

19:41:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0})

19:41:57 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:57 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011c00000072d907000f510007140028", 0x22)

[ 1298.964766] binder: BINDER_SET_CONTEXT_MGR already set
[ 1298.999051] binder: 3073:3074 ioctl 40046207 0 returned -16
19:41:57 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1299.081140] binder: 3086:3087 unknown command 3
[ 1299.100371] binder: 3073:3074 ERROR: BC_REGISTER_LOOPER called without request
[ 1299.129229] binder: 3086:3087 ioctl c0306201 20000040 returned -22
[ 1299.135778] binder: 3074 RLIMIT_NICE not set
19:41:57 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6(0xa, 0x80003, 0xff)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
write$binfmt_aout(r1, &(0x7f0000000140), 0x20)

19:41:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007480"], 0x0, 0x0, 0x0})

19:41:57 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001d00000072d907000f510007140028", 0x22)

19:41:57 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
epoll_create(0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:57 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:57 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1299.750424] binder: release 3073:3074 transaction 13373 out, still active
[ 1299.757474] binder: undelivered TRANSACTION_COMPLETE
19:41:57 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011d00000072d907000f510007140028", 0x22)

19:41:57 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000006f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a80"], 0x0, 0x0, 0x0})

19:41:57 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200000, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f00000000c0)={0x7, {0xcaa1, 0x62c, 0x401, 0x10001}, {0x1f, 0x5, 0xffff, 0x1}, {0x7}})
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x0, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:57 executing program 1:
seccomp(0x40000000000, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x100000000}]})
execve(0x0, 0x0, 0x0)
accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000400)={0x7, {{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x3e7, @dev={0xfe, 0x80, [], 0x11}, 0x3f}}, {{0xa, 0x4e20, 0x42c, @dev={0xfe, 0x80, [], 0xd}, 0x3}}, {{0xa, 0x4e24, 0x4, @mcast2, 0x4}}]}, 0x210)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000340)="0adc1f122c123f00100000")
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f00000001c0)=0x2, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f00000003c0)="17", 0x1, 0x8081, 0x0, 0x0)
close(r0)

19:41:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd80"], 0x0, 0x0, 0x0})

19:41:58 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001e00000072d907000f510007140028", 0x22)

19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000016f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x6, 0x4000)
ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:41:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff80"], 0x0, 0x0, 0x0})

19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000070000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011e00000072d907000f510007140028", 0x22)

19:41:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000e890e7883c9edf60f500000000000000000000000000000080000000000000000000ba850000ff000000"], 0x0, 0x0, 0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = dup3(r0, r1, 0x80000)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000))
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x80000001)

19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000170000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 1:

19:41:58 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000001f00000072d907000f510007140028", 0x22)

[ 1300.326007] input: syz1 as /devices/virtual/input/input55
[ 1300.352731] binder: 3199:3202 ioctl 8040ae9f 20000000 returned -22
19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1300.416368] binder: 3199:3209 ioctl 541a 20000080 returned -22
19:41:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffc06ff2"], 0x0, 0x0, 0x0})

19:41:58 executing program 1:

[ 1300.465272] binder: 3199:3209 ioctl 8040ae9f 20000000 returned -22
[ 1300.472258] binder: 3199:3202 ioctl 541a 20000080 returned -22
19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000071000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000011f00000072d907000f510007140028", 0x22)

[ 1300.542425] input: syz1 as /devices/virtual/input/input56
19:41:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x3c9, 0x0, 0x0})

19:41:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000002000080"], 0x0, 0x0, 0x0})

19:41:58 executing program 1:

[ 1300.708849] binder: 3234:3247 ioctl c0306201 20000040 returned -14
19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:41:58 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x100, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'syzkaller0\x00', 0x3}, 0x18)
rmdir(&(0x7f0000000100)='./file0\x00')
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
r4 = getgid()
fchown(r2, r3, r4)

19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000171000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002000000072d907000f510007140028", 0x22)

19:41:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000003000080"], 0x0, 0x0, 0x0})

19:41:58 executing program 1:

19:41:58 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x81, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)

[ 1300.833214] input: syz1 as /devices/virtual/input/input57
19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:58 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000072000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:58 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:59 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012000000072d907000f510007140028", 0x22)

19:41:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000004000080"], 0x0, 0x0, 0x0})

19:41:59 executing program 0:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x10000, 0x0)
ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000140))
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xf64, 0x4400)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x2, 0x2)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)

19:41:59 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)

19:41:59 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000172000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1301.103168] binder: 3291:3293 ioctl 6609 0 returned -22
19:41:59 executing program 2:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffffe}]})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
utimes(&(0x7f0000000300)='./file0\x00', 0x0)

19:41:59 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002100000072d907000f510007140028", 0x22)

19:41:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000005000080"], 0x0, 0x0, 0x0})

[ 1301.164076] binder: 3291:3309 ioctl 6609 0 returned -22
19:41:59 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x81, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000003c0)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)

19:41:59 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000073000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:41:59 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063c0400009ac86b68fb3feda2e3fd53d87907f00000000000000000000000000000000000000000000000000000000290000"], 0x0, 0x0, 0x0})

19:41:59 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012100000072d907000f510007140028", 0x22)

19:41:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000006000080"], 0x0, 0x0, 0x0})

19:41:59 executing program 2:

19:41:59 executing program 2:

[ 1301.854709] __nla_parse: 46 callbacks suppressed
[ 1301.854718] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:41:59 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1301.903062] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000007000080"], 0x0, 0x0, 0x0})

19:42:00 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002200000072d907000f510007140028", 0x22)

19:42:00 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000173000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1301.989164] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:00 executing program 2:

[ 1302.070174] binder_alloc_new_buf_locked: 31 callbacks suppressed
[ 1302.070185] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1302.106303] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1302.135706] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1302.138459] binder_alloc_new_buf_locked: 31 callbacks suppressed
[ 1302.138474] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1302.148156] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1302.161026] binder_alloc: 10471: binder_alloc_buf size 549755815680 failed, no address space
[ 1302.177497] binder_transaction: 31 callbacks suppressed
[ 1302.177515] binder: 3356:3360 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1302.183161] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1302.209426] binder_release_work: 31 callbacks suppressed
[ 1302.209433] binder: undelivered TRANSACTION_ERROR: 29201
[ 1302.224422] binder: 3362:3363 transaction failed 29201/-28, size 0-549755815680 line 3035
[ 1302.267092] binder: undelivered TRANSACTION_ERROR: 29201
19:42:00 executing program 1:

19:42:00 executing program 2:

19:42:00 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012200000072d907000f510007140028", 0x22)

19:42:00 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580)='/dev/zero\x00', 0x140, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x260000, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-vsock\x00', 0x2, 0x0)
write$P9_RWALK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x8b)
accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14, 0x80000)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000800000000000001ffffffffffff0000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={<r3=>0x0, 0x4, 0x3, 0x57, 0x3f}, &(0x7f0000000100)=0x14)
lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@sha1={0x1, "58e5db6835e4f8c90d035bb67c12e3c9d84c0e10"}, 0x15, 0x2)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f00000001c0)=0x4)

19:42:00 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000074000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000012000080"], 0x0, 0x0, 0x0})

[ 1302.717938] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1302.743629] binder_alloc: 10471: binder_alloc_buf size 549755818496 failed, no address space
19:42:00 executing program 2:

19:42:00 executing program 1:

[ 1302.767099] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1302.777881] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1302.791908] binder: 3381:3382 transaction failed 29201/-28, size 0-549755818496 line 3035
[ 1302.801167] binder: 3380:3383 transaction failed 29201/-28, size 0-549755813888 line 3035
19:42:00 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002300000072d907000f510007140028", 0x22)

[ 1302.837078] binder: undelivered TRANSACTION_ERROR: 29201
[ 1302.861966] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:00 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000174000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1302.899241] binder: undelivered TRANSACTION_ERROR: 29201
19:42:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000048000080"], 0x0, 0x0, 0x0})

19:42:00 executing program 1:

19:42:00 executing program 2:

19:42:00 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800)
getpeername$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff0e, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000e340400000000000000000000000000000000000000000000000000000000000000000060000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1302.944878] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1302.997601] binder_alloc: 10471: binder_alloc_buf size 549755832320 failed, no address space
19:42:01 executing program 2:

19:42:01 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000075000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:01 executing program 1:

19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012300000072d907000f510007140028", 0x22)

[ 1303.065549] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1303.096777] binder: 3401:3402 transaction failed 29201/-28, size 0-549755832320 line 3035
19:42:01 executing program 0:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003380)={0x8, 0x0, [{0x0, 0x4b, &(0x7f00000000c0)=""/75}, {0xf000, 0xe9, &(0x7f0000000140)=""/233}, {0x6000, 0x1000, &(0x7f0000000340)=""/4096}, {0x0, 0x6f, &(0x7f0000000240)=""/111}, {0x4, 0x33, &(0x7f00000002c0)=""/51}, {0x11000, 0x1000, &(0x7f0000001340)=""/4096}, {0x116000, 0x1000, &(0x7f0000002340)=""/4096}, {0x3000, 0x3, &(0x7f0000003340)=""/3}]})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:01 executing program 2:

[ 1303.148801] binder: undelivered TRANSACTION_ERROR: 29201
19:42:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000004c000080"], 0x0, 0x0, 0x0})

19:42:01 executing program 2:

19:42:01 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000175000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1303.271851] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002400000072d907000f510007140028", 0x22)

19:42:01 executing program 1:

[ 1303.321570] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1303.348187] binder: 3423:3427 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1303.357610] binder_alloc: 10471: binder_alloc_buf size 549755833344 failed, no address space
19:42:01 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000076000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1303.399050] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
[ 1303.419133] binder: 3428:3429 transaction failed 29201/-28, size 0-549755833344 line 3035
[ 1303.435967] binder: undelivered TRANSACTION_ERROR: 29201
19:42:01 executing program 1:

19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012400000072d907000f510007140028", 0x22)

19:42:01 executing program 2:

[ 1303.456709] binder: undelivered TRANSACTION_ERROR: 29201
19:42:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000060000080"], 0x0, 0x0, 0x0})

19:42:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=0x0], 0xfffffffffffffe12, 0x0, 0x0})

19:42:01 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000176000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1303.589666] binder: 3453:3455 unknown command 0
[ 1303.602965] binder: 3453:3455 ioctl c0306201 20000040 returned -22
[ 1303.621572] binder_alloc: 10471: binder_alloc_buf size 549755838464 failed, no address space
19:42:01 executing program 2:

19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002500000072d907000f510007140028", 0x22)

19:42:01 executing program 1:

[ 1303.655729] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
19:42:01 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
close(r0)

19:42:01 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000077000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:01 executing program 1:

[ 1303.768823] binder: 3456:3457 transaction failed 29201/-28, size 0-549755838464 line 3035
[ 1303.778086] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012500000072d907000f510007140028", 0x22)

[ 1303.818688] binder: undelivered TRANSACTION_ERROR: 29201
[ 1303.830431] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
19:42:01 executing program 2:

19:42:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000068000080"], 0x0, 0x0, 0x0})

19:42:01 executing program 1:

[ 1303.886896] binder: 3469:3470 transaction failed 29201/-28, size 0-549755813888 line 3035
19:42:01 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002600000072d907000f510007140028", 0x22)

19:42:02 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000177000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1303.969447] binder: undelivered TRANSACTION_ERROR: 29201
19:42:02 executing program 1:

19:42:02 executing program 2:

[ 1304.020218] binder_alloc: 10471: binder_alloc_buf size 549755840512 failed, no address space
19:42:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0})

[ 1304.075760] binder_alloc: allocated: 1024 (num: 107 largest: 32), free: 11264 (num: 1 largest: 11264)
19:42:02 executing program 1:

19:42:02 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000078000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:02 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012600000072d907000f510007140028", 0x22)

19:42:02 executing program 2:

[ 1304.124051] binder: 3501:3502 unknown command 3
[ 1304.131275] binder: 3501:3502 ioctl c0306201 20000080 returned -22
[ 1304.159442] binder: 3489:3490 transaction failed 29201/-28, size 0-549755840512 line 3035
19:42:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x1005)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000cebc50000000000000000000000000000000000000000000000000000000000000000"], 0x0, 0x0, 0x0})

[ 1304.208051] binder: undelivered TRANSACTION_ERROR: 29201
19:42:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000006c000080"], 0x0, 0x0, 0x0})

19:42:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1304.273751] binder: release 3514:3515 transaction 13411 out, still active
[ 1304.286133] binder: undelivered TRANSACTION_COMPLETE
19:42:02 executing program 2:

19:42:02 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000178000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:02 executing program 1:

19:42:02 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002700000072d907000f510007140028", 0x22)

[ 1304.390021] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:02 executing program 2:

19:42:02 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012700000072d907000f510007140028", 0x22)

[ 1304.456808] binder_alloc: allocated: 1032 (num: 108 largest: 32), free: 11256 (num: 1 largest: 11256)
19:42:02 executing program 2:

19:42:02 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x5, 0x4b6f, 0x3f, 0xa25})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:02 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000079000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000074000080"], 0x0, 0x0, 0x0})

19:42:02 executing program 1:

19:42:02 executing program 2:

[ 1304.617425] Unknown ioctl -1072667641
19:42:02 executing program 2:

19:42:02 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002800000072d907000f510007140028", 0x22)

19:42:02 executing program 1:

[ 1304.706070] Unknown ioctl -1072667641
19:42:02 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000179000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:02 executing program 2:

19:42:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000000000000000000000000000000000007a000080"], 0x0, 0x0, 0x0})

19:42:02 executing program 1:

19:42:02 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/252, 0xfc}, {&(0x7f0000000180)=""/177, 0xb1}], 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000002c0)={<r2=>0x0, 0x80000001}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r2, 0x64, "0f16df2628b25506d006da24f80128f3102edf38bf848479f6b79170ef7596ba2a72208949363cfb6bc74a522d61b1fccff576e0281feaf819eb306f46944caf7cfabf6c29c4ef1379e806723452d7ca36c562877b79d53207fffb69ab8b4020bae35452"}, &(0x7f0000000400)=0x6c)

19:42:02 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012800000072d907000f510007140028", 0x22)

19:42:02 executing program 2:

19:42:03 executing program 2:

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:03 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002900000072d907000f510007140028", 0x22)

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000030080"], 0x0, 0x0, 0x0})

19:42:03 executing program 1:

19:42:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x300, 0x0)

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:03 executing program 2:

19:42:03 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012900000072d907000f510007140028", 0x22)

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000050080"], 0x0, 0x0, 0x0})

19:42:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x5, 0x8, 0x4, 0xfff, 0x3, 0x3f, 0x9, 0x293, 0x38, 0xde, 0x1, 0x0, 0x20, 0x2, 0x6, 0x7, 0x2}, [{0x6474e555, 0x4043, 0x2, 0x7fff, 0xff, 0x80000000000000, 0x0, 0x7}, {0x5, 0x7, 0x6, 0x8001, 0x0, 0x1, 0x7, 0xf624}], "dfa19893a97d399d8d114779d0cd9bf3877f2456b2b78dc27353b70af376bf456017b9fdccfc3ecbeba6949149e4dccfba5c7ee8db8e03ecf39ce1a6079f8e7b50202860f374bc77f1a3e3a3d0e412c9c8845a884bc8febe4eafc067936f9fc6b3d9c3d5867efabcbd6fcee13eda6f012e7c7c9684ebe34d73a6bba3a907d84c0deb3da06defa36caba1f2b4be2d9d137a1a4d3be8c99f45580c70e56e264ca75286027cb7f123d1009e8125c56e31d26c6764991d982f824fb5e5ea7c34f42916230d3a20d617fae108886b7819dfeccba2a8", [[]]}, 0x24b)

19:42:03 executing program 1:

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:03 executing program 2:

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000060080"], 0x0, 0x0, 0x0})

19:42:03 executing program 1:

19:42:03 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002a00000072d907000f510007140028", 0x22)

19:42:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:03 executing program 2:

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc)
fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
close(r0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x102, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000070080"], 0x0, 0x0, 0x0})

19:42:03 executing program 1:

19:42:03 executing program 2:

19:42:03 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012a00000072d907000f510007140028", 0x22)

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:03 executing program 1:

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000120080"], 0x0, 0x0, 0x0})

19:42:03 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x141000)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000140)={0x5, 0x0, [{0xc0000002, 0x5, 0x3, 0x88, 0x1}, {0xc0000001, 0x8, 0xbe60be5, 0x1f, 0x3}, {0x0, 0x6, 0x3, 0x7, 0x9}, {0xa, 0x100, 0x0, 0x7, 0x4}, {0xc0000001, 0x5, 0x1, 0x0, 0x5}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffef4, 0x0, 0x0})
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200, 0x0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x7})

19:42:03 executing program 2:

19:42:03 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002b00000072d907000f510007140028", 0x22)

[ 1305.830064] binder: 3665:3670 ioctl c0306201 20000040 returned -14
19:42:03 executing program 2:

19:42:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000200080"], 0x0, 0x0, 0x0})

19:42:03 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1305.886680] binder: 3665:3670 ioctl c0306201 20000040 returned -14
19:42:03 executing program 1:

19:42:03 executing program 2:

19:42:04 executing program 1:

19:42:04 executing program 2:

19:42:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})

19:42:04 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012b00000072d907000f510007140028", 0x22)

19:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0080"], 0x0, 0x0, 0x0})

19:42:04 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0})
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x103100)
ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f0000000140)={0x23, &(0x7f0000000100)=""/35})

19:42:04 executing program 1:

19:42:04 executing program 2:

19:42:04 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:04 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002c00000072d907000f510007140028", 0x22)

19:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000400080"], 0x0, 0x0, 0x0})

[ 1306.289862] binder: 3715:3717 unknown command 808464432
19:42:04 executing program 1:

[ 1306.359905] binder: 3715:3717 ioctl c0306201 200000c0 returned -22
19:42:04 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:04 executing program 2:

19:42:04 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012c00000072d907000f510007140028", 0x22)

19:42:04 executing program 1:

19:42:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2002, 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'lapb0\x00', 0x6ffa})

19:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000480080"], 0x0, 0x0, 0x0})

19:42:04 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002d00000072d907000f510007140028", 0x22)

19:42:04 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:04 executing program 1:

19:42:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x9)

19:42:04 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2827d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup3(r2, r1, 0x0)

19:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0080"], 0x0, 0x0, 0x0})

[ 1306.719775] binder: 3761:3762 ioctl 541a 20000080 returned -22
19:42:04 executing program 1:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='\x00\x00\xac7\xaeET)\a\xc9\x00\x00\x00\x00')
exit(0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
renameat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

19:42:04 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000007f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:04 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012d00000072d907000f510007140028", 0x22)

19:42:04 executing program 2:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000240)='/', r0, &(0x7f0000d06ff8)='./file0\x00')
utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0xffffffffffffffff}}, 0x0)

19:42:04 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x17, 0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0})
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x101000, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180)='tls\x00', 0x4)
semget$private(0x0, 0x7, 0x1)
r2 = semget$private(0x0, 0xfffffffffffffffe, 0x200)
semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f00000000c0)=""/114)

19:42:04 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x400000, 0x0)
r1 = socket$inet6(0xa, 0x801, 0x0)
r2 = dup(r1)
setsockopt$inet_opts(r2, 0x0, 0xc, 0x0, 0x0)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000900)=""/138)
r3 = dup(0xffffffffffffffff)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000340)=""/180)
ioctl$TIOCLINUX6(r3, 0x541c, 0x0)
pipe2(&(0x7f0000000640)={<r4=>0xffffffffffffffff}, 0x807fd)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)
getsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @rand_addr, <r5=>0x0}, &(0x7f0000000300)=0xfffffffffffffff7)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, [], r5, 0x5edfb77e4e29b36c}, 0x48)
vmsplice(r4, &(0x7f0000000540)=[{&(0x7f0000000500)="b8c66780ce122a64be73e5f5d9d759cea31b41efd1ad16a127ecc0225cdfdf6ec134dee91e4eb52f157971f8d89ff14d6fd6", 0x32}], 0x1, 0x0)
clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0)

[ 1306.863627] __nla_parse: 62 callbacks suppressed
[ 1306.863636] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000600080"], 0x0, 0x0, 0x0})

19:42:05 executing program 2:
clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
socket$inet_udplite(0x2, 0x2, 0x88)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1142, 0x0)
execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
ptrace(0x10, r0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0)
ptrace(0x11, r0)

[ 1306.946660] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1306.978112] binder: 3793:3794 unknown command 808464432
19:42:05 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000017f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:05 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002e00000072d907000f510007140028", 0x22)

[ 1307.026797] binder: 3793:3794 ioctl c0306201 20000040 returned -22
19:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000680080"], 0x0, 0x0, 0x0})

19:42:05 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1307.113294] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1307.137867] binder_alloc_new_buf_locked: 29 callbacks suppressed
[ 1307.137876] binder_alloc: 10471: binder_alloc_buf size 549762629632 failed, no address space
19:42:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4080, 0x0)
ioctl$GIO_FONT(r1, 0x4b60, &(0x7f00000000c0)=""/127)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000200)={{0x343, 0x10000}, 0x1, 0x7, 0x6, {0x401, 0x8}, 0xa282, 0x3})
sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000280)=@x25={0x9, @remote={[], 0x2}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="ce597432d5e2957469b7fb8de1e9dd7f2b03f78b1e06193135151dbec2e76ab1a8567c92ed2bcc4f3d57deb550ba28be9b9d6978775e1543595f5e53f6b5195f5e1b2d7a40d2ab63203aa2ea3c00b5dabe2a4fae51b7bff2f7274bd5161b327054e52a34d1d5f9fc7979760db373812fb109ae98dcf0191ea3f616f602136cea568acf8f66e6993c86ee371a4244c9aef4893de004fd6d9ea40eb2069a2f428bab37e779cab05797028716c24253e5bc346e970e0ce9f1e084e1b57f81ab911266e6ade17c9aca1e767c6f8920d651f321f52d0e4ca411d34d2b5f0e9b7cf88b80d2f8e410", 0xe5}, {&(0x7f0000000400)="59caa2b5ed02b4972614fa0a2862525ffb71f492b821f7b8f71cf81ddf0a1e930db96384f74d9041f29a83306de4cae19d9d01b6c21640d8fed2726c615aa1c3bd7327d91c0191a5171373f4d75d3eddc73c28ccef765bfc3139b6431caa41fe67c9754eb8f2c682392cf923a69590861d93c62298df2c592fd285d22c95ab6e9c38cc3dbd52cf8a62792f147734b8700ab0537f06effdc3d24272f20187e1187b86045afe431dce218c7e404ec3fbe67fa464ad827e4996e39c3aef47abd4a91d5477c07f271111", 0xc8}], 0x2, &(0x7f0000000500)}, 0x90)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffb7, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYPTR64], 0xfffffffffffffdcc, 0x0, 0x0})

[ 1307.155420] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1307.184928] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1307.204385] binder_alloc_new_buf_locked: 29 callbacks suppressed
[ 1307.204401] binder_alloc: allocated: 1032 (num: 108 largest: 32), free: 11256 (num: 1 largest: 11256)
19:42:05 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012e00000072d907000f510007140028", 0x22)

19:42:05 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000006000080"], 0x0, 0x0, 0x0})

19:42:05 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000180000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1307.233240] binder: 3823:3824 ioctl c0306201 20000180 returned -14
[ 1307.235296] binder: undelivered TRANSACTION_COMPLETE
[ 1307.252795] binder: 3823:3826 ioctl c0306201 20000180 returned -14
[ 1307.261497] binder_transaction: 30 callbacks suppressed
[ 1307.261517] binder: 3811:3815 transaction failed 29201/-28, size 0-549762629632 line 3035
19:42:05 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1307.312965] binder_alloc: 10471: binder_alloc_buf size 549755815424 failed, no address space
[ 1307.334307] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000030000000000000000000000800500"], 0x0, 0x0, 0x0})
r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="d31874ae2051c80ff20adf36deb0a244c74a227f4e4a551063e5bfeb97eba093a0742284bb6f31055f84018b6cf2fb9c742be7fef11bc6f7c07ca5c74710e73d9512357763be341d43cd6a3bb1086135bc3e19f3df4549ae99601ec1d9dd5aee9506e463adb4", 0x66, 0xfffffffffffffffb)
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000740)="6b8b949ecddb7c1a8d5e80b49d18e3819470af231439e0a5ffec8b2a9882f33b8b3992d0c3798d6387f6b0a654f6b4554366b67b6fe57ed974b1da6f2251a89460b9ba32471549bc7d8f161bfebe5e29c0fbd488832a0c775124abf6238b0caf4712afa3e207407e47099f3404a52afff66ab7e28ea6f5378414dda679cda5bedaf1010abbd2067b6f94f1d6d03efd3d8470499550dbd793bda9ad909fe6f05bfab3c00759150b560b85d4cf41771dcdc52ac085751d75220d1906b5", 0xbc, 0x0)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000280)=[{&(0x7f0000000180)="8bbd6e706e0274642270a9c3c0cdeae18955b25208166bac2ffe90f01caf7e62adf980d895dbad5fcf053c0afa3e1920a80b765e585d275ea3d846c6e084b9f78f25270377e0de0b1c3f4483f6c7e866a33a2fad98613bbaea5117ca3b77d9d9fb1017a27be94e06bf13fa271c20218ea1ad375807", 0x75}, {&(0x7f0000000200)="8ca6069eccd0692a8edbb29765f7a2f2d0627258e08e972e095af212924ea5ce52e905d81d586be168e6845f05aa215875d9a41cbdcce7bd860b14d174d787351560525d8fa69ea62dcfb7", 0x4b}, {&(0x7f0000000340)="56aad00fdb998ef409bedfc710a4335fb3d403a96d854c28c666bf41a347dd496c159add9888b12e78ea5692900d15d47357fb3d71f10e053d698a12fe70e47fad20595a6a4ef8671a5b628d71069783fd7f8c84c309bf32c17c9aab4d6b49240f888b3a1d23fdd513035afb8ac2cb2f5fddccb3d01da8973fd0e2be4b4f5d2acf93c0fd7a0a8354ab921490b6cd1b8b53d3e3797e224a33f0b5561a952cdfd2177ed69592153105ed2792eed699dba8e371ad54a38044b0e6442780da9188da4605772152753a049da7e7e0ab3cfadf26b66a041be26391e11635f857b6e4d4c098d0d9cb1d53a35cc6dfac045381912861", 0xf2}, {&(0x7f0000000440)="8a9b6231943f0554abb51112777dc134fc7be41d5f2655e0c926eef1e3232b77efbaaf49ef2fc2a9559b6ad6acc1bd23cfda378f997f33efc399a6595f207914763854723f357812de586ae5d63cba2909ddaf98ddddac96b9df15850da45be6d640f3038e864a8c62225d7abefc324c0b19a670568fcf22b02a7d415256f575ce2c5e0acf4174ef690814def83eea74aafa0286d4d6c722f90499737fba459c178129c93650820025d090f075448c3d3fef35147a0a096c9e434a7e477d6785aec4b0689a2012c66b758907b277e95f9dbe5ed08e", 0xd5}, {&(0x7f0000000540)="32eeaf38e9debee733f9f4fc2ccd0fe4231dd9eb42f5ae8711aa4bf7845164a5f018208fabe9e7a307952d7d58d6f64f7f3dcf98e874a160f2abbdf1d241765d5c6ce85c9e1d836000cce50eab3bd9ed46c0c8e0c1459684577e51dd524921d43ba341382896c69640284518f8800493f56ebbffcf38c596d1431f11f94b494a86b6e0a0fa368f18b9b07c55c5ac945ac6ac35bf551d80f574ca49b1e35697efbfc2d5327d686ab79933df0d2f97321700fa9693db2fef7e27fca5496062d282043d7b6cd936afdc83af386b10e6d5370679b1bacdda2493957f9c852cc4c1", 0xdf}, {&(0x7f0000000640)="cd107dfa0796fd72b0b1af255874b6c252d30a819b8b8383d7b3c395aad5929bd467d46647060835fe2fb34d9bed3c5cbe43f8e758c86b87a48610bc84ddffae71accebc74d0d2459b004d9fe79184c22f9f66407bfcd50d82550f46ad902b282041453c1822a5a2920119531c08e536b2edd4c070f99a056a8df68ce616e725e77f4ac56079e7e85f68134aa1d8b91064d9090262e3e9e4840cf7a485571587971ca6080d4f3134", 0xa8}], 0x6, r2)

[ 1307.361458] binder_alloc: allocated: 1040 (num: 109 largest: 32), free: 11248 (num: 1 largest: 11248)
[ 1307.375716] binder_release_work: 30 callbacks suppressed
[ 1307.375723] binder: undelivered TRANSACTION_ERROR: 29201
[ 1307.389725] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0080"], 0x0, 0x0, 0x0})

[ 1307.409309] binder: 3831:3832 transaction failed 29201/-28, size 0-549755815424 line 3035
[ 1307.429188] binder: undelivered TRANSACTION_COMPLETE
19:42:05 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:05 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000002f00000072d907000f510007140028", 0x22)

[ 1307.457904] binder: undelivered TRANSACTION_ERROR: 29201
[ 1307.477961] binder_alloc: 10471: binder_alloc_buf size 6047313952776 failed, no address space
19:42:05 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000081000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1307.504856] binder_alloc: allocated: 1048 (num: 110 largest: 32), free: 11240 (num: 1 largest: 11240)
[ 1307.530463] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:05 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000006000080"], 0x0, 0x0, 0x0})

[ 1307.569156] binder: 3841:3842 transaction failed 29201/-28, size 3-6047313952768 line 3035
[ 1307.577804] binder_alloc: 10471: binder_alloc_buf size 549762891776 failed, no address space
[ 1307.608649] binder_alloc: allocated: 1048 (num: 110 largest: 32), free: 11240 (num: 1 largest: 11240)
[ 1307.614177] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1307.631158] binder: undelivered TRANSACTION_ERROR: 29201
[ 1307.641653] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1307.650588] binder: 3844:3845 transaction failed 29201/-28, size 0-549762891776 line 3035
[ 1307.651375] binder_alloc: 10471: binder_alloc_buf size 6047313952776 failed, no address space
19:42:05 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000012f00000072d907000f510007140028", 0x22)

19:42:05 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000181000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1307.670077] binder: undelivered TRANSACTION_COMPLETE
[ 1307.678127] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
19:42:05 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000740080"], 0x0, 0x0, 0x0})

[ 1307.721431] binder_alloc: 10471: binder_alloc_buf size 549755815424 failed, no address space
[ 1307.730800] binder: 3841:3842 transaction failed 29201/-28, size 3-6047313952768 line 3035
[ 1307.743001] binder: undelivered TRANSACTION_ERROR: 29201
[ 1307.758641] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
19:42:05 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003000000072d907000f510007140028", 0x22)

[ 1307.791421] binder: 3855:3858 transaction failed 29201/-28, size 0-549755815424 line 3035
[ 1307.803215] binder: undelivered TRANSACTION_ERROR: 29201
19:42:05 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000082000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:05 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x5455, 0x93}, {0x9, 0x5}]}, 0x14, 0x2)

19:42:05 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1307.873878] binder: undelivered TRANSACTION_ERROR: 29201
[ 1307.884978] binder_alloc: 10471: binder_alloc_buf size 549763416064 failed, no address space
19:42:05 executing program 2 (fault-call:3 fault-nth:0):
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1307.948375] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
[ 1307.978874] binder: 3873:3874 transaction failed 29201/-28, size 0-549763416064 line 3035
[ 1307.979584] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013000000072d907000f510007140028", 0x22)

19:42:06 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000182000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1308.009936] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
[ 1308.012056] input input61: cannot allocate more than FF_MAX_EFFECTS effects
19:42:06 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1308.059230] binder: undelivered TRANSACTION_ERROR: 29201
[ 1308.068583] binder: 3879:3887 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1308.077288] binder: 3879:3896 ioctl 5411 20000080 returned -22
19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003100000072d907000f510007140028", 0x22)

19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:06 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000007a0080"], 0x0, 0x0, 0x0})

[ 1308.144678] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1308.144709] binder: 3879:3896 ioctl 5411 20000080 returned -22
19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x2, 0x0)

19:42:06 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1308.207207] input input62: cannot allocate more than FF_MAX_EFFECTS effects
[ 1308.245126] binder: undelivered TRANSACTION_ERROR: 29201
[ 1308.285216] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
[ 1308.335702] binder_alloc: 10471: binder_alloc_buf size 549763809280 failed, no address space
[ 1308.351634] binder: 3879:3887 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1308.369110] binder_alloc: allocated: 1056 (num: 111 largest: 32), free: 11232 (num: 1 largest: 11232)
[ 1308.379687] binder: undelivered TRANSACTION_ERROR: 29201
19:42:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800)
fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xa, "5e7a05ecee0101668202793a90cc62c118b9d1"}, 0x15, 0x1)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400000, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000040)={0x1f, 0x80000000, 0x4, 0x3})

19:42:06 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000083000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013100000072d907000f510007140028", 0x22)

19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x541b, 0x0)

19:42:06 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1308.394896] binder: 3914:3915 transaction failed 29201/-28, size 0-549763809280 line 3035
[ 1308.418105] binder: undelivered TRANSACTION_ERROR: 29201
19:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:06 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:06 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000183000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5421, 0x0)

19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003200000072d907000f510007140028", 0x22)

19:42:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630000004000000000000000000000000000000000000000000000e9000000000000000000000000000000b41c56527ba11ce1f7f1f72570b9083a64cbc24727a24bf8b85848ae983838b220f79fb4da1c04390036a4ebde32266eeca570aab5d96683245a132a97161253dee370b8a46cdfe6e9ca1fb70000000000000000000000000000"], 0x0, 0x0, 0x0})
prctl$PR_GET_SECCOMP(0x15)

[ 1308.542296] binder: release 3946:3948 transaction 13456 out, still active
[ 1308.564177] binder: undelivered TRANSACTION_COMPLETE
19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5450, 0x0)

19:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:06 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000084000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013200000072d907000f510007140028", 0x22)

[ 1308.684755] binder: 3965:3966 unknown command 16384
19:42:06 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:06 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5452, 0x0)

[ 1308.723311] binder: 3965:3966 ioctl c0306201 20000040 returned -22
[ 1308.739064] binder: release 3968:3971 transaction 13457 out, still active
[ 1308.746141] binder: undelivered TRANSACTION_COMPLETE
19:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:06 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5a9d14992000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:06 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000184000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:06 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003300000072d907000f510007140028", 0x22)

[ 1308.869211] binder: release 3988:3990 transaction 13458 out, still active
[ 1308.884058] binder: undelivered TRANSACTION_COMPLETE
19:42:06 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000080000000000000000000000000000000069670000000000000000ba64b128"], 0x0, 0x0, 0x0})
r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="07aecc290aa19b0778f987826d6af64ccdcc4bef22102a3c3f2d703735d5462ea8c2c314f238afa6b138a2de8196477bf3d6a40794a4a97b73eda511879001578b5c3ae09c8a2611d43f848f25de44959796d41568ae01ec18e29330a885d55e89df9558604a1115ae41f6cf60c7d6a0afa05bcf88", 0x75, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r1)
r2 = getpid()
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000280)={0x6, 0x9, 0x7044})
ptrace$setregset(0x4205, r2, 0x3, &(0x7f0000000100)={&(0x7f0000000080)="c37b9dbbb0e6e4e1607fe80c05fc884b2c3cc91d4a1f8ade66d0bc239430122dd9f3c340b737120528503c97f9d964bed5704fce58da571b0b8090f23b7f021cdc7fb0f9b20a083e75276946ee582c7c36197f3499d542a9c97d7894f874aabbe7640e5590e850c088376b", 0x6b})
gettid()

19:42:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000002386f2"], 0x0, 0x0, 0x0})

[ 1308.929064] binder: release 3988:3990 transaction 13459 out, still active
[ 1308.959112] binder: undelivered TRANSACTION_COMPLETE
19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5460, 0x0)

19:42:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013300000072d907000f510007140028", 0x22)

19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000085000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000a4ceb2947c5bf6222f290b263e7272ed00000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000020080"], 0x0, 0x0, 0x0})

[ 1309.118383] binder: 4014:4021 ioctl c0306201 0 returned -14
19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000185000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5502, 0x0)

19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003400000072d907000f510007140028", 0x22)

19:42:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x404b)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000000c0)={0xf3, [0x8001, 0xac2f, 0x0, 0xfffffffffffffffa, 0x8, 0x0, 0x2, 0x5, 0x6, 0x1, 0x7, 0x8, 0x1000, 0x2, 0x80000000, 0xfffffffffffffffc, 0x7, 0x590, 0x0, 0xfffffffffffffff9, 0x8, 0xcd3, 0xffffffffffffffe0, 0x20, 0x80000000, 0x1c0000000000, 0x6, 0x6, 0x0, 0x5, 0x2, 0xc8, 0x9, 0x20, 0x1ff, 0x400, 0x2, 0x3, 0x10001, 0x1, 0x7, 0x2, 0xc6, 0xffffffffffffffe1, 0x7, 0x6, 0x70000], 0xa})

19:42:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x554f, 0x0)

19:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000030080"], 0x0, 0x0, 0x0})

19:42:07 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40000)
socket$inet6(0xa, 0x6, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
listen(0xffffffffffffffff, 0x0)
userfaultfd(0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000480)={0x0, 0x0, 0x30, 0xe672, 0x3}, 0x0)
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000140)={0x0, 0x27, 0x44f0f00000000000, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u32=0x0}})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f00000000c0)={0x290, 0xffffffffffff0001})
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000100)={0x4, 'syz1\x00'})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000086000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5563, 0x0)

19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013400000072d907000f510007140028", 0x22)

[ 1309.394693] binder: 4051:4054 ioctl c0306201 0 returned -14
19:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040080"], 0x0, 0x0, 0x0})

19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003500000072d907000f510007140028", 0x22)

19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000186000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045564, 0x0)

19:42:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x480200, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4008641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x7ff, 0xc6e, 0x4, 0x3]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000140)={0x100000000})
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={<r2=>0x0, 0x4, 0x8, [0x4, 0x400, 0x4, 0x100000000, 0x1, 0x4, 0x0, 0x80]}, &(0x7f00000001c0)=0x18)
ioctl$UI_END_FF_UPLOAD(r1, 0x406055c9, &(0x7f0000000280)={0xa, 0x0, {0x55, 0x0, 0x14, {0x0, 0x4}, {0x2000000000000000, 0x1}, @ramp={0x8001, 0xfffffffffffffffd, {0x72, 0xffffffff, 0x7, 0x100}}}, {0x54, 0x230b, 0x8, {0xffffffffffffff3e}, {0x401, 0x9}, @ramp={0x3ff, 0xff, {0x80000001, 0x0, 0x81, 0xff}}}})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x8, 0xff, 0xffffffff, r2}, &(0x7f0000000240)=0x10)

19:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000050080"], 0x0, 0x0, 0x0})

19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000087000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1309.699069] binder: 4095:4096 ioctl c0306201 0 returned -14
19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013500000072d907000f510007140028", 0x22)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045565, 0x0)

19:42:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

19:42:07 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = dup2(r0, r0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)={0x4, 0x0, [{0xf004, 0xec, &(0x7f0000000080)=""/236}, {0x1f000, 0xbb, &(0x7f0000000180)=""/187}, {0x3001, 0xf2, &(0x7f0000000340)=""/242}, {0x4000, 0xf6, &(0x7f0000000440)=""/246}]})

19:42:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000060080"], 0x0, 0x0, 0x0})

19:42:07 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000187000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:07 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045566, 0x0)

19:42:07 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003600000072d907000f510007140028", 0x22)

19:42:07 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1309.884674] binder: 4120:4121 ioctl 4008af03 20000240 returned -22
[ 1309.915996] binder: 4120:4126 ioctl 4008af03 20000240 returned -22
19:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2)
ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x38db7f3a)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000070080"], 0x0, 0x0, 0x0})

19:42:08 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045567, 0x0)

19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013600000072d907000f510007140028", 0x22)

19:42:08 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000088000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000120080"], 0x0, 0x0, 0x0})

19:42:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1310.155986] binder: 4153:4154 unknown command 1073767180
19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003700000072d907000f510007140028", 0x22)

[ 1310.221613] binder: 4153:4154 ioctl c0306201 20000040 returned -22
[ 1310.230558] binder: 4153:4154 unknown command 1073767180
19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000480080"], 0x0, 0x0, 0x0})

[ 1310.267682] binder: 4153:4154 ioctl c0306201 20000040 returned -22
19:42:08 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000188000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

19:42:08 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045568, 0x0)

19:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000140)={0x0, 0x4, 0xfffffffffffffffa, 0x80, '\x00', 0xffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000007e52580008000000000000000000000000000000000000000000000000000000000000e0f929a99082a97b0000000000000048718e7555937a69530e3df606398684d8e4bb4e558e1dbda6abf4610000000000000fff26b878abcdcae5f7c190"], 0x0, 0x0, 0x0})

19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013700000072d907000f510007140028", 0x22)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0080"], 0x0, 0x0, 0x0})

19:42:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

19:42:08 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40045569, 0x0)

19:42:08 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300ffffa888000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xfffffffffffffff7, 0x4000)
r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=<r3=>0x0)
fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, <r5=>0x0}, &(0x7f0000000240)=0xc)
r6 = fcntl$getown(r0, 0x9)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000640)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8)
stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002d40)={<r9=>0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000002d00)='/dev/binder#\x00', 0xffffffffffffffff}, 0x30)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d80)={0x0, <r10=>0x0}, &(0x7f0000002dc0)=0xc)
getgroups(0x1, &(0x7f0000002e00)=[<r11=>0x0])
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002e80)={<r12=>0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002e40)='vmnet1-\x00'}, 0x30)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002ec0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000002fc0)=0xe8)
r14 = getegid()
fcntl$getownex(r1, 0x10, &(0x7f0000003000)={0x0, <r15=>0x0})
fstat(r0, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
fstat(r0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003180)={<r18=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x28, &(0x7f0000003140)=')self/-md5sumwlan1proc&-{eth1vboxnet0.!\x00'}, 0x30)
lstat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, <r19=>0x0})
getresgid(&(0x7f0000003280)=<r20=>0x0, &(0x7f00000032c0), &(0x7f0000003300))
sendmsg$netlink(r2, &(0x7f0000003400)={&(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc, &(0x7f0000002cc0)=[{&(0x7f0000000340)={0x2c4, 0x18, 0x320, 0x70bd26, 0x25dfdbfd, "", [@typed={0x8, 0x46, @pid=r3}, @typed={0x8, 0x8e, @uid=r4}, @generic, @nested={0x3c, 0x23, [@generic="ff0b6e6fcfae4517555ce907fb010c61bab1d39de0d1ec5050a2f0d79bc219f22640f28f97563137146e28b44038d6faf56fbab156"]}, @generic="c8227b1b929a35e91fad0b25b5c750248f17187f569ebdc164578760a2b49edd2167cf58542f75c8408adcacc9fd21abe595b91d55a51ae667d4faf55bda117508e60c10f3362748dea9c060bc6bcc3bee576efcef5b04ca8e15757bbe62a8b3d81ad44db836beb6994e0234a46575cc5b1305db30ee49d5d3354602c9a3f223e126c400025531ca8c6469facf71a32f21570fac9989315a47c5641e40e5f89fe7", @nested={0x130, 0x77, [@generic="6046e4ba89ae39f805bc99ee3435aca6d9a2cdee5054e159e05d0485542da155e4a77b920055c00633ab324422de510580d6c6fa06017df497a32380e2daa923d37f871ac3f80f9e9bd528ac42980e0d1d935929b566c7fcd0cc751f6b84e41044d15842af06198255181f0dcddbfb61b3d285f7d08378d37d9d9f150cb697fb3fbcb8cf04dae07b251e156d8ad02efe83a5311b3fcc587638e91511d925f29b03c3e9d6071226736bd33050f26e206adc61bdcc9f593835c874e49180c29be6ccff135734e6ff25b135809bfe6ae8abdd8ac1068b1b63ab0cd8658678209fe5b2f233cb17d6a660a01f22863d4f60d4ee53c606fcf5", @typed={0x8, 0x81, @uid=r5}, @typed={0x14, 0x37, @ipv6=@ipv4={[], [], @remote}}, @generic="5125f847baf025fcb52bb2f6f3dc4c6cd0f603970f5f2a57"]}, @generic="480c6a624f3dc0cd4c71da789f0ca1e7bcc2d2bcbd2a5e60d5ab35ecd51391f5b4eedad262bb2d52fca08d842e2f639a59141d4cc8a8620cd42b2b272afc25f6a3de1c364d1f193c4bca0ff8eadb53ba8b74d589fe59c6e05477cd2b0d0972f5b17b3d3e103bae7c5fc655b5dc468a678199af0ee30a8194d7498bf364b1f8822eb80ea1bc4ffdfe93d5322d854ce3b8d98fd485"]}, 0x2c4}, {&(0x7f0000000740)={0x11cc, 0x20, 0x421, 0x70bd26, 0x25dfdbfe, "", [@nested={0x11b0, 0x26, [@generic="c767012ffeb01d40ba8eb45d6bf1dac7b5b54227a3722910d6e0c1ff8e75da92a9c5f998fb3ff247be30605d066c9edbc28bec876bfb105de349dddbf0b2f9480e17f8345ffd6680035979d66b41e1969cbd970324ec8d56d3188678cd6f48ef7592167d145636f119a65ec1cbedb9aa73c097f0daf9d5435b727f8445f3397122d11cd60461b8d2a7ba2b51e6fcd78a4f7b6ffd6a42", @typed={0x8, 0x2b, @pid=r6}, @typed={0x8, 0x5b, @uid=r7}, @generic="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", @generic="ff60a4fbbbe5ade3af741079910df5b280c4e1f9d5b52cd7e2f0a382007de9ac15e4c438ce25fc43219330e68603007e376bf67c705376ceb46ae445e49ae6090b2742c14eb983abceea50e6cade8e4a9298c9f3e682a3f30b0e364f019bc3c173037164a046637abd6ec7f4288c983af8cd156856579d62136ac785bc9295cfdb7356396506da11f60f1174caeb2fef4b3966cc9ee36662bdf5d052e512e81623baafd2", @generic="fcef58b4b5187cd851979353f912a35bf7f1b438f7da8d56af3f8bfd7aba01516318666982098b7bc8a07720fc14ce9c7a674b1241443965c1bea58395f5bcb57bdc408a943b07bb37f25eb7e532f85a664d3909c8711b5b0d5975c80f777655cd19"]}, @generic="f13e5160ef42774bb7e67c"]}, 0x11cc}, {&(0x7f00000002c0)={0x28, 0xfffffffffffffbff, 0x100, 0x70bd28, 0x25dfdbfb, "", [@generic="0981a5ce291ab8bff17fe77178d240d7fcfc6288338e43"]}, 0x28}, {&(0x7f0000001a00)={0x12b0, 0x1a, 0x200, 0x70bd27, 0x25dfdbfb, "", [@nested={0x10c4, 0x4a, [@generic="cbfff2731e", @generic="cee23f7f7ad88a669dbc315d27ad71cd139d22d9d6c47cee8a7f4051fd4c3627c0ee32", @typed={0xc, 0x7e, @u64=0x7fff}, @typed={0x8, 0x41, @u32=0x6}, @generic="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", @generic="2beaf18ad9dd369d75a009cc5727b9057dd5b4c54f829b8fd3c6c704bef3ae7ec29f97f713a92a791e8667ec5c07c4b007e23978171cbf0610dc15effc49a0619401607a80526671c2d098f4cf785d4b18941d9ec269d3f6af1e30e47ad3c3", @generic="f18a724d8db8f0d41e00ff18bf", @typed={0x8, 0x5, @uid=r8}, @typed={0x8, 0x1f, @ipv4=@multicast2}, @typed={0x8, 0x92, @u32=0x353}]}, @typed={0x8, 0x48, @u32=0x5}, @generic="e40ed85e1a9972b314d8a870895db3477f1eefbc53160598b22eae6a3c86854c43e39df0617e068e82e4cae9843cc5f717b61521b392e3a489b1777d67e84cf8da6867e4d4e94f50ef24f3cbd7aaa7c068948769272aa3bea3a75efd9beb6f70b380757a476e5a7170488e480f1cd29e8d21709b42acf7ae7bbd30c87e92ebfda8814a923027da83dde0644cea1a0603e68c972066aea024f78adf302ee7d20eb6bdb136c32409da1f09a4af4aad1226eea4042a7bf7f38b80271e383e695b1a807c86df836292f04244750a626dcb20c5a37383dabd338a214ed769aa0d1121bd", @generic="a08b016aeeec4ab24684ff82501433c21bc0815bc8f4a0446df63a46edde414d763ab62cf619520165f4aa9506349bfd08e6404a27d92a69a8f22899d6a7803b0a26f0934251da81b9077706cdf1f629e36d1f0b8ae77ae39dbdfb071974e6c678df156b21f944c21dd60784f7f3846822bdbbca0ce09794a5a52aac4095117bf3bd87f5cc9c0e090ab5066aaf077bfeb835c0752d0431c92577e1098f1a17154d8993671b1209d07be2d881fa675656a58d45c16fd915218a286e2ee89e93bcf7b714c7ed262798a9d4a32b3895261162ae1594b4fc404225ebb6de7d155e0aa750acb8da02c3ad0c04315fd9742b05"]}, 0x12b0}], 0x4, &(0x7f0000003340)=[@cred={0x18, 0x1, 0x2, r9, r10, r11}, @rights={0x10, 0x1, 0x1, [r1]}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}, @cred={0x18, 0x1, 0x2, r18, r19, r20}, @rights={0x2c, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r0, r0]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r0, r0]}], 0xbc, 0x20004000}, 0x10)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000600080"], 0x0, 0x0, 0x0})

19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003800000072d907000f510007140028", 0x22)

19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013800000072d907000f510007140028", 0x22)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000680080"], 0x0, 0x0, 0x0})

19:42:08 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000089000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:08 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0})

19:42:08 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:08 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4004556a, 0x0)

19:42:08 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003900000072d907000f510007140028", 0x22)

19:42:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0080"], 0x0, 0x0, 0x0})

19:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xa0)
inotify_rm_watch(r1, r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000b1ec669aee105d511325ae0c33be15fe77476a1cc7da922ac488119163065a72dd842a27a9f1fde1be1f2ecd5a8542df98a9ce1ef9121af2c4514c6c5c8b828b988bfdfdc0520696cf3a4476db4a9cc94e2ad3db8b7301f2886da66bb5aabc9d4e155c55ad47c04cd1a76eca6fe8fbbfea157df74a92f6df2a"], 0x0, 0x0, 0x0})

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000189000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4004556b, 0x0)

19:42:09 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013900000072d907000f510007140028", 0x22)

19:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000740080"], 0x0, 0x0, 0x0})

19:42:09 executing program 0:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x100, 0x0)
ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000140)={0x0, 0x9, 0x8})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x80801)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000000c0)={0x20000000})

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4004556c, 0x0)

19:42:09 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003a00000072d907000f510007140028", 0x22)

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000, 0x81)
ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e)

19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4004556d, 0x0)

19:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000007a0080"], 0x0, 0x0, 0x0})

19:42:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})

19:42:09 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013a00000072d907000f510007140028", 0x22)

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x40000, 0x80)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0xb10, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

19:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380"], 0x0, 0x0, 0x0})

19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4004556e, 0x0)

19:42:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000964b7e5"], 0x0, 0x0, 0x0})

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003b00000072d907000f510007140028", 0x22)

19:42:09 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x8000, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffff63}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7c36}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd7c7b09}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x913}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa284}]}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010)

[ 1311.724510] binder: undelivered TRANSACTION_COMPLETE
19:42:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0})

19:42:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580"], 0x0, 0x0, 0x0})

19:42:09 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x40049409, 0x0)

[ 1311.878429] binder: 4355:4356 unknown command 12
19:42:09 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4008556c, 0x0)

19:42:09 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013b00000072d907000f510007140028", 0x22)

[ 1311.909761] __nla_parse: 69 callbacks suppressed
[ 1311.909771] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1311.945279] binder: 4355:4356 ioctl c0306201 20000040 returned -22
19:42:09 executing program 0:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x10000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x111, 0x1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r1}}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=ANY=[], 0xffffffffffffff7e, 0x0, 0x0})

19:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680"], 0x0, 0x0, 0x0})

[ 1311.967286] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0})

19:42:10 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:10 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003c00000072d907000f510007140028", 0x22)

19:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000004c0)=ANY=[@ANYBLOB="5d0060a8c0eff5ebff28b74d932b54fac80800ef7d1de405ec4e53d2830448847d566778b67a2927d7990d000000000000003eed9a58f3facda1faaafa5129fac20a97575d1a766d85d73bc4ff15f24077a0efa1728678594eaa1bd8b3585a15db6d20fede7b20064bf78018cc31030adbd90a5afa0c3fb8373631ba5bc21042650917d29cc68ea0cac0e581602550bdce40b9943a769ac46433e29d3a08f47ba3f1504957460e45724a6d0400000000000000"], 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
dup(r2)
io_setup(0x3, 0x0)
io_submit(0x0, 0x1, &(0x7f000049bfe8)=[&(0x7f00004dbfc0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000391000)}])
sched_setaffinity(0x0, 0x8, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)
syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x95b, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000140)={0x0, 0x300, 0x44f0f00000000000, [], &(0x7f0000000000)={0x0, 0x0, [], @p_u32=0x0}})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{0x0, 0x4, 0x9, 0x6}, {0x0, 0x0, 0x0, 0x4}, {0x7, 0x8, 0x3, 0x56}]}, 0x8)
symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffd5a, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x400c55cb, 0x0)

[ 1312.124475] binder: 4383:4386 unknown command 12
[ 1312.140161] binder: 4383:4386 ioctl c0306201 20000040 returned -22
[ 1312.140861] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780"], 0x0, 0x0, 0x0})

19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\f'], 0x0, 0x0, 0x0})

[ 1312.249623] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1312.284342] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1312.294071] binder: 4402:4403 unknown command 12
19:42:10 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013c00000072d907000f510007140028", 0x22)

[ 1312.299277] binder_alloc_new_buf_locked: 46 callbacks suppressed
[ 1312.299298] binder_alloc: 10471: binder_alloc_buf size 549873254400 failed, no address space
[ 1312.305311] binder: 4402:4403 ioctl c0306201 20000040 returned -22
[ 1312.305455] binder_alloc_new_buf_locked: 46 callbacks suppressed
[ 1312.305467] binder_alloc: allocated: 1096 (num: 116 largest: 32), free: 11192 (num: 1 largest: 11192)
19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x4020940d, 0x0)

19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1312.356495] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:10 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:10 executing program 0:
r0 = creat(&(0x7f00000001c0)='./file0/../file0\x00', 0x8)
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1312.439043] binder_transaction: 46 callbacks suppressed
[ 1312.439060] binder: 4405:4406 transaction failed 29201/-28, size 0-549873254400 line 3035
[ 1312.471086] binder: release 4416:4419 transaction 13507 out, still active
[ 1312.481805] binder: undelivered TRANSACTION_COMPLETE
19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x402c5828, 0x0)

19:42:10 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003d00000072d907000f510007140028", 0x22)

19:42:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280"], 0x0, 0x0, 0x0})

[ 1312.508497] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1312.525055] binder_release_work: 46 callbacks suppressed
[ 1312.525061] binder: undelivered TRANSACTION_ERROR: 29201
[ 1312.545221] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x402c582a, 0x0)

[ 1312.592343] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1312.629064] binder_alloc: allocated: 1104 (num: 117 largest: 32), free: 11184 (num: 1 largest: 11184)
[ 1312.660302] binder: 4424:4425 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1312.660977] binder: release 4436:4438 transaction 13509 out, still active
[ 1312.682088] binder_alloc: 10471: binder_alloc_buf size 550057803776 failed, no address space
[ 1312.690909] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:10 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1312.716777] binder: undelivered TRANSACTION_COMPLETE
[ 1312.735087] binder: undelivered TRANSACTION_ERROR: 29201
19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)

[ 1312.758020] binder_alloc: allocated: 1112 (num: 118 largest: 32), free: 11176 (num: 1 largest: 11176)
[ 1312.779108] binder: 4439:4440 transaction failed 29201/-28, size 0-550057803776 line 3035
19:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000002900000000001f000000"], 0x0, 0x0, 0x0})

[ 1312.800274] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:10 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013d00000072d907000f510007140028", 0x22)

19:42:10 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x406855c9, 0x0)

[ 1312.853517] binder_alloc: 10471: binder_alloc_buf size 550057803776 failed, no address space
[ 1312.859290] binder: undelivered TRANSACTION_ERROR: 29201
[ 1312.889175] binder: release 4452:4454 transaction 13511 out, still active
[ 1312.896481] binder: undelivered TRANSACTION_COMPLETE
19:42:10 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1312.909313] binder_alloc: allocated: 1120 (num: 119 largest: 32), free: 11168 (num: 1 largest: 11168)
19:42:10 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1312.961420] binder_alloc: 10471: binder_alloc_buf size 45080496832512 failed, no address space
[ 1312.979344] binder: 4439:4440 transaction failed 29201/-28, size 0-550057803776 line 3035
19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003e00000072d907000f510007140028", 0x22)

[ 1313.008292] binder: undelivered TRANSACTION_ERROR: 29201
19:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000002080"], 0x0, 0x0, 0x0})

[ 1313.038264] binder_alloc: allocated: 1120 (num: 119 largest: 32), free: 11168 (num: 1 largest: 11168)
19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x8004552d, 0x0)

[ 1313.079347] binder: release 4472:4473 transaction 13514 out, still active
[ 1313.086319] binder: undelivered TRANSACTION_COMPLETE
[ 1313.114071] binder: 4460:4465 transaction failed 29201/-28, size 45079976738816-520093696 line 3035
19:42:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013e00000072d907000f510007140028", 0x22)

19:42:11 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1313.130506] binder_alloc: 10471: binder_alloc_buf size 45080496832512 failed, no address space
[ 1313.158627] binder: undelivered TRANSACTION_ERROR: 29201
[ 1313.164638] binder_alloc: allocated: 1128 (num: 120 largest: 32), free: 11160 (num: 1 largest: 11160)
19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0xc00c55ca, 0x0)

[ 1313.216205] binder_alloc: 10471: binder_alloc_buf size 550292684800 failed, no address space
[ 1313.227881] binder: 4460:4465 transaction failed 29201/-28, size 45079976738816-520093696 line 3035
[ 1313.256562] binder_alloc: allocated: 1128 (num: 120 largest: 32), free: 11160 (num: 1 largest: 11160)
[ 1313.277039] binder: undelivered TRANSACTION_ERROR: 29201
19:42:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x7fc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
mq_open(&(0x7f0000000080)='/dev/binder#\x00', 0x1, 0x1, &(0x7f00000000c0)={0x0, 0x6, 0x6, 0xfffffffffffffff9, 0x8000, 0x81, 0x80000001, 0x1})
syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20, 0x800)

19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000003f00000072d907000f510007140028", 0x22)

19:42:11 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000008f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1313.319552] binder: 4485:4486 transaction failed 29201/-28, size 0-550292684800 line 3035
[ 1313.330215] binder: release 4488:4489 transaction 13517 out, still active
[ 1313.349220] binder: undelivered TRANSACTION_COMPLETE
19:42:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x19, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1313.375859] binder: undelivered TRANSACTION_ERROR: 29201
19:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f80"], 0x0, 0x0, 0x0})

19:42:11 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000018f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0xc0189436, 0x0)

19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000013f00000072d907000f510007140028", 0x22)

[ 1313.485792] binder: release 4521:4522 transaction 13518 out, still active
[ 1313.508944] binder: undelivered TRANSACTION_COMPLETE
19:42:11 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000ac0), &(0x7f0000000b00)=0x8)
r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000a80)=@sack_info={<r3=>0x0, 0xffff, 0x2}, &(0x7f0000000900)=0xffffff3b)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000940)={<r4=>0x0, 0x7e0000000000000, 0x20, 0x7, 0x5}, &(0x7f0000000980)=0x18)
sendmmsg$inet_sctp(r2, &(0x7f0000000a40)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000100)="c42272f50185b05871b80ce77e8fba64261306363452c6566ae6fc07791066a02a7673a1010f3c5589d46cf92c429d1eea38f9288a5edcb58d65338e070706ff122da906db43814621799ad097df31436fd616a4bc110c4dd68dbcc26700f17dd25b90c48a96d1f42e5c05b39a3cc7b8b9b1dbe3044e26a3000e858d242a45d01ac1a9a5763b5840596b7422993364a89409c8b87613f135028ad6cd885742298be956e12fb8ede21f7da71c0c8ff4dce6c154a3b88d3ae2b6d71f504cf6cb49e1c07203e699f7f61085ee5fdcc4dd75b896f3b0d0400276b669c4427c5f0f9b45a3a0181b15d179cced08a454d0513812aef1b9cebb42db08", 0xf9}, {&(0x7f0000000200)="e03d811b91d9768dd48854c2efb3b90e1cd48e192b212c98053f7991cad952379bcaab068d6b0ba7c59ac4d4d522c36d17a4d3e649fb36d5e15994ba51fd43afe0368f653cbb45e6258f1a2820e138b693bc6a97bb88349053187c18b2d7a06a667f89f0e849f2816a9f2ddc18d1f468c16159d1d93b1f5603bff25937b97c3bc11403dc37224b2ff3d94b3dcae83783da39acf17ac72ecaee6cbcbc720ae8187a176a17b79614c6bacb06a0652db19dd60b5b18169955f236cad234e4731d3a95912353981b6901a9361e13b96cbe6d9f9e91aa0641105fd096136929f496e7e932691147", 0xe5}, {&(0x7f0000000340)="33f8276ab2cc12", 0x7}, {&(0x7f0000000380)="c472f20754e9cefff2028f226089635e5a54144cf9104711d517b0b237dfe51bb0eefb85db1c0f99da790049f939fa9ac50948db710565c93bc83b2000683720571d56df376bcbdf46afa5662fd518e78d30499dfc4d9c405fe328e181b1be2b9e6b8f132e1a7c470d2ce2e12a7689b8b62eb92e7e36160371edd0bfbf1ef921e3b004ee8027d330f698c214d96d78270183474ddd20663f147b2da4b3a87d5f33ee14314ad58ed08ed8a3fe773f8ae139be1e24cd0a0e6fb3dd360ddb80f8ac5ad9edce3ad1d7c618dd2d21f0189dc8882e73a75edf8908be0091e926b7775c4add0574", 0xe4}, {&(0x7f0000000480)="d0d91e223efae398e56eab6cb0e7869b29d66cd49d162f1a4edbfd1a10ac971a242d2af5889a9a4c880d4f5c49e883a1bce21280373f6c19573b411668f0b19e82f48befd00384d6b06591ae6e89c1b5", 0x50}, {&(0x7f0000000500)="feefa8d5fed70f7e9f3b8c42456740f23100627dc847bb9dc1f7f852819c59139dae0b84a66a20a0df3b56cb08df1c67a9d0c761ef3f46304505a103a2d10afce09cef464b17d2e14fe6c6837690953bc723f65ae9a527701b0f9545c19804ccba8582f0124b0d4b7f7e23bf7afaf96679715394df0dc46fa959187065a8f9aebadbb40bfbf578f44753b421228a8866b5d67741ff819d4323e04fa57105a331ae2189b17af79a626a93fe619e7b61f6ba0d24e7cc7a38820050a4f1469b0da40759c2d41c44d6e9729a7ad5f357e54977bdb69147856592932fd6676220c59357a62671a6a8a024e9b1", 0xea}, {&(0x7f0000000600)="74f0c6859d71d5fe3dabd35c7f6a99e7bc95adf8ae3ea322675b6cd3becd5957c86fb9df95d6920867e95771c042bf3b6dd2f2bf44f4a9628cbaaea415e0c652739fe835fd386ee300be34ecd8", 0x4d}, {&(0x7f0000000680)="ddf7cd19e1b0ac7d9f2d42b62021b19d7c4a0b46d9d5e9e011211abdc1eb2c4db158d05bc88b2e7a40c37e50527b61250747aa33ea5b9ad89f7c57e87bcbc000d9dd2248fb2311bf7d795483d87395b872d5db8fe4523dc3b1233223c58acb259378592574f57163e231a132a30722d6679d6546878f02d97b7ae2af47b464a0b3f78f9a6eb6a247ff684db34b2632c2d574b0a27e984db65503f50d40a58845a7351b56523dae3da15e5260ce00ae2d7bfdf2b548bfc43a2ed714cc4791c5260c7482b0ac54e932481bb0475aedbb6ac0dbb7ecf291d6889112c71cba", 0xdd}, {&(0x7f0000000780)="2e354457f5c4f1e1e46504681e575de46897c77b5adf413170dc16f78d98828335861f20756951c61e41d49ddd89ea21d169e69d1d66865de331dcb03fe2d7b72d6749faefafd3c1f08fc156490431948da48ad1be46547536de847549a5fcfe7e1be4583e6f0104f9405b923f46d49f1c4087f20f5d135106adbe5924dc1666c26f", 0x82}], 0x9, &(0x7f0000000b40)=ANY=[@ANYBLOB="2c000000840000000100000001000300080000000500000006000000090000000000000004040000", @ANYRES32=r3, @ANYBLOB="1c000000840000000200000004000100540000001f4a55b3", @ANYRES32=r4, @ANYBLOB="1000000084000000060000003f0800001400000084000000000000000200020002000400b94f059a7e983a9f27e646ded182b73baa48018299083f9e668063cfc567a8e02fe482050010f8709e6750e291ad5202c22e2d33dedd03b197e95a68a2bbdab37f4963df7bd57992b0cdb68e4d6868a7ae483c2ae66597b2b38b2a080846624f42c93eaf4a4a"], 0x6c, 0x4008080}], 0x1, 0x24008001)

19:42:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1313.575419] binder_alloc: 10471: binder_alloc_buf size 550812778496 failed, no address space
19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0xc020660b, 0x0)

19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004000000072d907000f510007140028", 0x22)

[ 1313.651561] binder_alloc: allocated: 1144 (num: 122 largest: 32), free: 11144 (num: 1 largest: 11144)
[ 1313.669739] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1313.688545] binder: 4528:4529 transaction failed 29201/-28, size 0-550812778496 line 3035
19:42:11 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000090000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1313.703757] binder_alloc: allocated: 1144 (num: 122 largest: 32), free: 11144 (num: 1 largest: 11144)
[ 1313.722452] binder: undelivered TRANSACTION_ERROR: 29201
19:42:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004080"], 0x0, 0x0, 0x0})

19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0xc06855c8, 0x0)

19:42:11 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014000000072d907000f510007140028", 0x22)

[ 1313.760080] binder: 4536:4539 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1313.764750] binder: undelivered TRANSACTION_COMPLETE
[ 1313.778868] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1313.790054] binder_alloc: allocated: 1152 (num: 123 largest: 32), free: 11136 (num: 1 largest: 11136)
19:42:11 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:11 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000190000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1313.823434] binder: 4555:4556 transaction failed 29201/-28, size 0-550829555712 line 3035
[ 1313.829036] binder: undelivered TRANSACTION_ERROR: 29201
[ 1313.852003] binder: undelivered TRANSACTION_ERROR: 29201
19:42:11 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xc, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={<r2=>0x0, 0x9}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r2, 0xa5, "b05b6ea85ecb3b882c66035d4c943dd0b7167ecc5219e26cf1b726d986376f5651d66d547c10c673d20f304db49b80f2d4cb2f40e540e1f9653efd817132c9e55518f3afe4f9e5a7dda8747c3453dd74a1beb076b7ee8111d69e5b4381cda808c34703a0088c023d5a27f94406fbb3779c89596f2d914be38ef50d5fd68f72cba26c936b4dbe35976dae6d5eda21daf8b0582648e2fc1bc48e5465ab1b3242aabc81b4d5bc"}, &(0x7f0000000080)=0xad)

[ 1313.912249] binder: release 4565:4569 transaction 13524 out, still active
[ 1313.928318] binder: undelivered TRANSACTION_COMPLETE
19:42:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
socket$inet_dccp(0x2, 0x6, 0x0)

19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004100000072d907000f510007140028", 0x22)

19:42:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004880"], 0x0, 0x0, 0x0})

19:42:12 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000091000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1314.065095] binder: release 4581:4582 transaction 13525 out, still active
[ 1314.103335] binder: undelivered TRANSACTION_COMPLETE
19:42:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

[ 1314.119464] input input102: cannot allocate more than FF_MAX_EFFECTS effects
19:42:12 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x10900, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c80"], 0x0, 0x0, 0x0})

19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014100000072d907000f510007140028", 0x22)

[ 1314.185309] input input103: cannot allocate more than FF_MAX_EFFECTS effects
19:42:12 executing program 2:
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:12 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000191000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1314.282481] input input104: cannot allocate more than FF_MAX_EFFECTS effects
19:42:12 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x280000, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, <r2=>0x0})
process_vm_writev(r2, &(0x7f0000000200)=[{&(0x7f0000000140)=""/71, 0x47}, {&(0x7f00000001c0)=""/25, 0x19}], 0x2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/145, 0x91}], 0x1, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000180)={0x0, 0x100000000000006, 0x7022, 0x1})
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)

[ 1314.339182] binder: release 4604:4614 transaction 13529 out, still active
19:42:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006080"], 0x0, 0x0, 0x0})

19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004200000072d907000f510007140028", 0x22)

19:42:12 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000092000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1314.431991] binder: release 4629:4630 transaction 13533 out, still active
[ 1314.464090] input input105: cannot allocate more than FF_MAX_EFFECTS effects
19:42:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000806cc0e0e71b68d56c3e3ca2c2639ca0aeb01fd9f6eca8362efbbeae069918bc46dc1032d7932df6bd88c54be373704397cb0abdc9fff51b7d8678cf2918bde55bfaa2c2538da6faf9c8a63d212afc3d3807993a35ab25563e5ce94e5cc080fe5e7eec4528288dece7dea5b14867498225d0efbb00322348c3af70c93951cac0e7ba16c730c8366d650e923f7beae3d9da7a585ad3e942"], 0x0, 0x0, 0x0})
fcntl$setpipe(r0, 0x407, 0x3)

19:42:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006880"], 0x0, 0x0, 0x0})

19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014200000072d907000f510007140028", 0x22)

19:42:12 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000192000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0})

19:42:12 executing program 2:
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000000)='projid_map\x00')
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x805, 0x0)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={<r3=>0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x9, 0x9, 0x7, 0x4, 0x7}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x5, 0x4, 0xd87d, 0x7, r3}, &(0x7f0000000180)=0x10)

19:42:12 executing program 0:
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x3)
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:12 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000093000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:12 executing program 1 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004300000072d907000f510007140028", 0x22)

19:42:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c80"], 0x0, 0x0, 0x0})

[ 1314.810466] input input107: cannot allocate more than FF_MAX_EFFECTS effects
19:42:12 executing program 2:
r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x200040)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={<r1=>0x0, 0x0, 0xd2a, 0x100, 0x9, 0x3}, &(0x7f0000000240)=0x14)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r1, 0x7}, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
recvmsg(r0, &(0x7f0000000380)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000880)=""/217, 0xd9}], 0x1}, 0x40000000)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x105200, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={<r3=>0x0, 0x9}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000140)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)

19:42:12 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="cc883ca5a083e228b0f1326821da45018f2cb689395af59a85824c32dee77bc6232545751a599665801b1bd3cda79586e3025019a883df826e4bc3ae39aa139ae2eea5937396a4259d9d8a34f06bae820e10bb19ce072a")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1314.901591] FAULT_INJECTION: forcing a failure.
[ 1314.901591] name failslab, interval 1, probability 0, space 0, times 0
19:42:12 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014300000072d907000f510007140028", 0x22)

19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007480"], 0x0, 0x0, 0x0})

[ 1314.958801] input input109: cannot allocate more than FF_MAX_EFFECTS effects
[ 1314.973530] CPU: 0 PID: 4688 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43
[ 1314.980656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1314.990018] Call Trace:
[ 1314.992700]  dump_stack+0x1db/0x2d0
[ 1314.996337]  ? dump_stack_print_info.cold+0x20/0x20
[ 1315.001353]  ? __lock_acquire+0x572/0x4a30
19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a80"], 0x0, 0x0, 0x0})

[ 1315.005593]  should_fail.cold+0xa/0x15
[ 1315.009482]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1315.009519]  ? ___might_sleep+0x1e7/0x310
[ 1315.009533]  ? arch_local_save_flags+0x50/0x50
[ 1315.009553]  __should_failslab+0x121/0x190
[ 1315.027563]  should_failslab+0x9/0x14
[ 1315.031364]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1315.036217]  ? _raw_spin_unlock+0x2d/0x50
[ 1315.040372]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.045907]  binder_get_thread+0x287/0x980
[ 1315.050144]  ? ___might_sleep+0x1e7/0x310
[ 1315.054290]  ? binder_free_ref+0xb0/0xb0
19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280"], 0x0, 0x0, 0x0})

[ 1315.058354]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1315.063888]  ? rcu_pm_notify+0xd0/0xd0
[ 1315.067774]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.073313]  ? __might_sleep+0x95/0x190
[ 1315.077389]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.082934]  binder_ioctl+0x24e/0x1920
[ 1315.086830]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.092367]  ? iterate_fd+0x4b0/0x4b0
[ 1315.096187]  ? wait_for_completion+0x810/0x810
[ 1315.100777]  ? check_preemption_disabled+0x48/0x290
[ 1315.105796]  ? __fget_light+0x2db/0x420
[ 1315.109771]  ? fget_raw+0x20/0x20
[ 1315.113237]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1315.118800]  ? do_fast_syscall_32+0x13b/0xf98
[ 1315.123299]  ? do_fast_syscall_32+0x13b/0xf98
[ 1315.127799]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1315.132383]  ? trace_hardirqs_on+0xbd/0x310
[ 1315.136725]  ? security_file_ioctl+0x93/0xc0
[ 1315.141178]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.146710]  __ia32_compat_sys_ioctl+0x197/0x620
[ 1315.151567]  do_fast_syscall_32+0x333/0xf98
19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380"], 0x0, 0x0, 0x0})

[ 1315.155896]  ? do_int80_syscall_32+0x880/0x880
[ 1315.160483]  ? trace_hardirqs_off+0x310/0x310
[ 1315.164983]  ? syscall_return_slowpath+0x3b0/0x5f0
[ 1315.169917]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1315.175458]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1315.180481]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1315.185337]  entry_SYSENTER_compat+0x70/0x7f
[ 1315.189759] RIP: 0023:0xf7feb869
19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480"], 0x0, 0x0, 0x0})

[ 1315.193137] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1315.212027] RSP: 002b:00000000f5de70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1315.219742] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1315.227012] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1315.234289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1315.241653] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1315.248922] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
19:42:13 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000193000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1315.261074] QAT: Invalid ioctl
[ 1315.269827] QAT: Invalid ioctl
[ 1315.340549] binder: 4682:4688 ioctl c0306201 20000040 returned -12
19:42:13 executing program 1 (fault-call:1 fault-nth:1):
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:13 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
socket$alg(0x26, 0x5, 0x0)

19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580"], 0x0, 0x0, 0x0})

19:42:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:13 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004400000072d907000f510007140028", 0x22)

19:42:13 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000094000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000680"], 0x0, 0x0, 0x0})

19:42:13 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000681000)=@abs, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x793a368cff4c0ced)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x13)

19:42:13 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000194000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1315.468809] input input110: cannot allocate more than FF_MAX_EFFECTS effects
[ 1315.489988] FAULT_INJECTION: forcing a failure.
[ 1315.489988] name failslab, interval 1, probability 0, space 0, times 0
19:42:13 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014400000072d907000f510007140028", 0x22)

[ 1315.582622] CPU: 1 PID: 4735 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43
[ 1315.589896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1315.599256] Call Trace:
[ 1315.601977]  dump_stack+0x1db/0x2d0
[ 1315.605620]  ? dump_stack_print_info.cold+0x20/0x20
[ 1315.610646]  ? binder_transaction+0x5ed/0x78d0
[ 1315.615251]  should_fail.cold+0xa/0x15
[ 1315.619149]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1315.624302]  ? ___might_sleep+0x1e7/0x310
[ 1315.628464]  ? arch_local_save_flags+0x50/0x50
[ 1315.633073]  __should_failslab+0x121/0x190
[ 1315.637320]  should_failslab+0x9/0x14
[ 1315.641121]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1315.645802]  ? _raw_spin_unlock+0x2d/0x50
[ 1315.649960]  binder_transaction+0xa47/0x78d0
[ 1315.654374]  ? print_usage_bug+0xd0/0xd0
[ 1315.658437]  ? __lock_acquire+0x572/0x4a30
[ 1315.662677]  ? __lock_acquire+0x572/0x4a30
[ 1315.666940]  ? binder_thread_read+0x4920/0x4920
[ 1315.671615]  ? mark_held_locks+0x100/0x100
[ 1315.675861]  ? __lock_acquire+0x572/0x4a30
[ 1315.680100]  ? __lock_acquire+0x572/0x4a30
[ 1315.684339]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1315.689277]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1315.694211]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1315.699140]  ? print_usage_bug+0xd0/0xd0
[ 1315.703199]  ? __might_fault+0x12b/0x1e0
[ 1315.707294]  ? find_held_lock+0x35/0x120
[ 1315.711370]  ? __might_fault+0x12b/0x1e0
[ 1315.715438]  ? lock_acquire+0x1db/0x570
[ 1315.719420]  ? lock_downgrade+0x910/0x910
[ 1315.723587]  ? lock_release+0xc40/0xc40
[ 1315.727768]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
19:42:13 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000095000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1315.733315]  ? _copy_from_user+0xdd/0x150
[ 1315.737512]  binder_thread_write+0x692/0x2a70
[ 1315.742150]  ? binder_transaction+0x78d0/0x78d0
[ 1315.746929]  ? binder_get_thread+0x287/0x980
[ 1315.751344]  ? binder_ioctl+0x24e/0x1920
[ 1315.755405]  ? __ia32_compat_sys_ioctl+0x197/0x620
[ 1315.758214] input input113: cannot allocate more than FF_MAX_EFFECTS effects
[ 1315.760338]  ? do_fast_syscall_32+0x333/0xf98
[ 1315.760357]  ? entry_SYSENTER_compat+0x70/0x7f
[ 1315.760375]  ? __might_fault+0x12b/0x1e0
[ 1315.760389]  ? find_held_lock+0x35/0x120
[ 1315.760403]  ? __might_fault+0x12b/0x1e0
[ 1315.760419]  ? lock_acquire+0x1db/0x570
[ 1315.760434]  ? lock_downgrade+0x910/0x910
[ 1315.760463]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1315.772193]  ? _copy_from_user+0xdd/0x150
[ 1315.780806]  binder_ioctl_write_read.isra.0+0x303/0xb60
[ 1315.780823]  ? __init_waitqueue_head+0x92/0x150
[ 1315.780843]  ? binder_thread_write+0x2a70/0x2a70
[ 1315.780859]  ? _raw_spin_unlock+0x2d/0x50
[ 1315.780878]  ? binder_get_thread+0x1f3/0x980
[ 1315.780896]  ? binder_free_ref+0xb0/0xb0
[ 1315.780911]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1315.780926]  ? rcu_pm_notify+0xd0/0xd0
[ 1315.789025]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.789040]  ? __might_sleep+0x95/0x190
[ 1315.789067]  binder_ioctl+0x424/0x1920
[ 1315.789087]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.789123]  ? iterate_fd+0x4b0/0x4b0
[ 1315.789140]  ? wait_for_completion+0x810/0x810
[ 1315.789158]  ? check_preemption_disabled+0x48/0x290
[ 1315.801359] input input115: cannot allocate more than FF_MAX_EFFECTS effects
[ 1315.802794]  ? __fget_light+0x2db/0x420
[ 1315.802810]  ? fget_raw+0x20/0x20
[ 1315.802827]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1315.812305]  ? do_fast_syscall_32+0x13b/0xf98
[ 1315.812321]  ? do_fast_syscall_32+0x13b/0xf98
[ 1315.812335]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1315.812351]  ? trace_hardirqs_on+0xbd/0x310
[ 1315.812370]  ? security_file_ioctl+0x93/0xc0
[ 1315.812388]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1315.812402]  __ia32_compat_sys_ioctl+0x197/0x620
[ 1315.812421]  do_fast_syscall_32+0x333/0xf98
19:42:13 executing program 1 (fault-call:1 fault-nth:2):
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780"], 0x0, 0x0, 0x0})

19:42:13 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004500000072d907000f510007140028", 0x22)

19:42:13 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000195000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:13 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1ff, 0x101000)
write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x31, 0x4, 0x1}, 0x10000}}, 0x18)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="747275737465642e2f6465762f7573626d6f6e2300c76d8120dfc82e392bb4bd254cb51f0f3293ef03041ddf7d687fbef01d45fbd14058576f7db53603143cb1307038bdd310e99405d4c7ae53d61ded4ee722712fa9cea0bfa19c3eaf16100e1a8fb30d10e79192dcaf42ca3c50a7135579a6786761c555aa6b5fecfefbcad2bbce62351b835eb7f6c82a94de853836137f490f7c18ded34e736e33ed862bc684795910b81fd3b9f3bdeb490936c0b9ac811e275779a785cbd37d46ee274721c3620ada05483c84587613adcf26"], &(0x7f0000000140)=""/87, 0x57)

19:42:13 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x2000000200000, 0x0)
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x5)

[ 1315.821820]  ? do_int80_syscall_32+0x880/0x880
[ 1315.830345]  ? trace_hardirqs_off+0x310/0x310
[ 1315.830380]  ? syscall_return_slowpath+0x3b0/0x5f0
[ 1315.830410]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1315.830424]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1315.830442]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1315.830466]  entry_SYSENTER_compat+0x70/0x7f
[ 1315.840034] RIP: 0023:0xf7feb869
[ 1315.840050] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1315.840058] RSP: 002b:00000000f5de70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1315.840072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1315.840093] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1315.840100] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1315.840108] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1315.840116] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
19:42:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000001280"], 0x0, 0x0, 0x0})

[ 1316.028485] input input117: cannot allocate more than FF_MAX_EFFECTS effects
[ 1316.045303] FAULT_INJECTION: forcing a failure.
[ 1316.045303] name failslab, interval 1, probability 0, space 0, times 0
19:42:14 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000096000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:14 executing program 0:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2a8101, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0084320, &(0x7f0000000180)={0x8001, &(0x7f00000000c0)="7b6fd8af29bdc823425edb8c9b4c1aab7c075b877ef1bad55b5433051e5791858beb5b016c71739338cbf92852aa9ffa2d4a43547ee5829dc62a1798d7ecfb1d4deb2226fb9e07ad82ad07885c0e44eb6215dc58c9ef32575dcc0390e8b0520f8f68088e0c39fdd6ba8c958c641d089cdb2d98625ff224e1d038148272185279abd75f5765c821cb7d7b5b8c91fe83f45d94968f220940a178bc29e90ffa3642912bac906b8e847d031552c6748ec143b91578ccd4cd47931bfb7b"})
r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:14 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014500000072d907000f510007140028", 0x22)

[ 1316.131256] CPU: 1 PID: 4772 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43
[ 1316.138410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1316.147771] Call Trace:
[ 1316.150380]  dump_stack+0x1db/0x2d0
[ 1316.154026]  ? dump_stack_print_info.cold+0x20/0x20
[ 1316.159053]  ? binder_transaction+0x5ed/0x78d0
[ 1316.163659]  should_fail.cold+0xa/0x15
[ 1316.167566]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1316.172685]  ? ___might_sleep+0x1e7/0x310
[ 1316.176873]  ? arch_local_save_flags+0x50/0x50
19:42:14 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004600000072d907000f510007140028", 0x22)

[ 1316.181469]  __should_failslab+0x121/0x190
[ 1316.185710]  should_failslab+0x9/0x14
[ 1316.189523]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1316.194200]  ? lockdep_init_map+0x10c/0x5b0
[ 1316.198546]  binder_transaction+0xb48/0x78d0
[ 1316.202966]  ? print_usage_bug+0xd0/0xd0
[ 1316.207055]  ? __lock_acquire+0x572/0x4a30
[ 1316.211381]  ? __lock_acquire+0x572/0x4a30
[ 1316.215635]  ? binder_thread_read+0x4920/0x4920
[ 1316.220313]  ? mark_held_locks+0x100/0x100
[ 1316.224551]  ? __lock_acquire+0x572/0x4a30
[ 1316.228797]  ? __lock_acquire+0x572/0x4a30
[ 1316.233039]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.237984]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.242922]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.247864]  ? print_usage_bug+0xd0/0xd0
[ 1316.251937]  ? __might_fault+0x12b/0x1e0
[ 1316.256008]  ? find_held_lock+0x35/0x120
[ 1316.260072]  ? __might_fault+0x12b/0x1e0
[ 1316.260089]  ? lock_acquire+0x1db/0x570
[ 1316.260108]  ? lock_downgrade+0x910/0x910
[ 1316.260122]  ? lock_release+0xc40/0xc40
[ 1316.260152]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
19:42:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004880"], 0x0, 0x0, 0x0})

[ 1316.268156]  ? _copy_from_user+0xdd/0x150
[ 1316.268179]  binder_thread_write+0x692/0x2a70
[ 1316.268205]  ? binder_transaction+0x78d0/0x78d0
[ 1316.268220]  ? binder_get_thread+0x287/0x980
[ 1316.299492]  ? binder_ioctl+0x24e/0x1920
[ 1316.299513]  ? __ia32_compat_sys_ioctl+0x197/0x620
[ 1316.299530]  ? do_fast_syscall_32+0x333/0xf98
[ 1316.299563]  ? entry_SYSENTER_compat+0x70/0x7f
[ 1316.299579]  ? __might_fault+0x12b/0x1e0
[ 1316.299593]  ? find_held_lock+0x35/0x120
[ 1316.299606]  ? __might_fault+0x12b/0x1e0
[ 1316.299619]  ? lock_acquire+0x1db/0x570
[ 1316.299633]  ? lock_downgrade+0x910/0x910
[ 1316.299665]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1316.299678]  ? _copy_from_user+0xdd/0x150
[ 1316.299693]  binder_ioctl_write_read.isra.0+0x303/0xb60
[ 1316.299707]  ? __init_waitqueue_head+0x92/0x150
[ 1316.299724]  ? binder_thread_write+0x2a70/0x2a70
[ 1316.299737]  ? _raw_spin_unlock+0x2d/0x50
[ 1316.299755]  ? binder_get_thread+0x1f3/0x980
[ 1316.299773]  ? binder_free_ref+0xb0/0xb0
[ 1316.299788]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1316.299800]  ? rcu_pm_notify+0xd0/0xd0
[ 1316.299817]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1316.317818]  ? __might_sleep+0x95/0x190
[ 1316.343579]  binder_ioctl+0x424/0x1920
[ 1316.343622]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1316.343641]  ? iterate_fd+0x4b0/0x4b0
[ 1316.343662]  ? wait_for_completion+0x810/0x810
[ 1316.366709]  ? check_preemption_disabled+0x48/0x290
[ 1316.366731]  ? __fget_light+0x2db/0x420
[ 1316.366746]  ? fget_raw+0x20/0x20
[ 1316.424406]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1316.429948]  ? do_fast_syscall_32+0x13b/0xf98
[ 1316.434454]  ? do_fast_syscall_32+0x13b/0xf98
[ 1316.438975]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1316.443601]  ? trace_hardirqs_on+0xbd/0x310
[ 1316.447944]  ? security_file_ioctl+0x93/0xc0
[ 1316.452374]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1316.458008]  __ia32_compat_sys_ioctl+0x197/0x620
[ 1316.462863]  do_fast_syscall_32+0x333/0xf98
[ 1316.467312]  ? do_int80_syscall_32+0x880/0x880
[ 1316.471902]  ? trace_hardirqs_off+0x310/0x310
[ 1316.476793]  ? syscall_return_slowpath+0x3b0/0x5f0
[ 1316.481727]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1316.487274]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1316.492733]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1316.497591]  entry_SYSENTER_compat+0x70/0x7f
[ 1316.502527] RIP: 0023:0xf7feb869
[ 1316.505909] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1316.524806] RSP: 002b:00000000f5de70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
19:42:14 executing program 1 (fault-call:1 fault-nth:3):
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c80"], 0x0, 0x0, 0x0})

19:42:14 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014600000072d907000f510007140028", 0x22)

19:42:14 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000196000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:14 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_yield()
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x9, 0x4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='syz1\x00')
ioctl$PPPIOCGIDLE(r1, 0x8008743f, &(0x7f0000000040))

19:42:14 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x1ffffd, 0x0)
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000000))
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8)
stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fchown(r0, r2, r3)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000100)={0x1000, {{0x2, 0x4e24, @rand_addr=0x101}}, {{0x2, 0x4e21, @loopback}}}, 0x104)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c63000800634040000000af000000001500000000000000c5498bbd411ab24800000000000000000000000000000000000000"], 0x0, 0x0, 0x0})
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000280)="7d48162af327ef6610739ebb7cdcab17e3489034246b2db2e13c46f141e902d4835807be7473e0e42cc120a2b2bcf557a5fceb0ce129079f367cfcf107da454b901741299536a59865e303280a25c72fdd3f02f01955bd7c45524d447a979591ff9713c9c5abd670ad173b43e882494a59f5545392156fbe248603857b2f73ff")

[ 1316.532500] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1316.532509] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1316.532516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1316.532523] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1316.532530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
19:42:14 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004700000072d907000f510007140028", 0x22)

19:42:14 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000097000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006080"], 0x0, 0x0, 0x0})

[ 1316.616108] input input118: cannot allocate more than FF_MAX_EFFECTS effects
[ 1316.633167] binder: 4810:4812 unknown command 134243084
[ 1316.640699] FAULT_INJECTION: forcing a failure.
[ 1316.640699] name failslab, interval 1, probability 0, space 0, times 0
[ 1316.658705] binder: 4810:4812 ioctl c0306201 20000040 returned -22
[ 1316.704598] binder: 4810:4812 unknown command 134243084
[ 1316.715598] CPU: 0 PID: 4813 Comm: syz-executor1 Not tainted 5.0.0-rc3+ #43
[ 1316.722828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1316.732181] Call Trace:
[ 1316.734802]  dump_stack+0x1db/0x2d0
[ 1316.738444]  ? dump_stack_print_info.cold+0x20/0x20
[ 1316.743471]  ? binder_shrink_count+0xc0/0xc0
[ 1316.747892]  should_fail.cold+0xa/0x15
[ 1316.751807]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1316.756920]  ? ___might_sleep+0x1e7/0x310
[ 1316.761085]  ? arch_local_save_flags+0x50/0x50
[ 1316.765673]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.770612]  ? fs_reclaim_acquire+0x20/0x20
[ 1316.774947]  __should_failslab+0x121/0x190
[ 1316.779198]  should_failslab+0x9/0x14
[ 1316.783003]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1316.787699]  ? binder_transaction+0xdca/0x78d0
[ 1316.792315]  binder_alloc_new_buf+0x6d7/0x1760
[ 1316.796905]  ? binder_alloc_prepare_to_free+0x230/0x230
[ 1316.800107] binder: 4810:4812 ioctl c0306201 20000040 returned -22
[ 1316.802289]  binder_transaction+0x116d/0x78d0
[ 1316.802319]  ? print_usage_bug+0xd0/0xd0
[ 1316.802331]  ? __lock_acquire+0x572/0x4a30
[ 1316.821409]  ? binder_thread_read+0x4920/0x4920
[ 1316.826094]  ? mark_held_locks+0x100/0x100
[ 1316.830331]  ? __lock_acquire+0x572/0x4a30
[ 1316.834738]  ? __lock_acquire+0x572/0x4a30
[ 1316.838970]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.838990]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.839007]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1316.839021]  ? print_usage_bug+0xd0/0xd0
[ 1316.839036]  ? __might_fault+0x12b/0x1e0
[ 1316.839048]  ? find_held_lock+0x35/0x120
[ 1316.848904]  ? __might_fault+0x12b/0x1e0
[ 1316.848928]  ? lock_acquire+0x1db/0x570
[ 1316.848947]  ? lock_downgrade+0x910/0x910
[ 1316.848965]  ? lock_release+0xc40/0xc40
[ 1316.848994]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1316.862087]  ? _copy_from_user+0xdd/0x150
[ 1316.862108]  binder_thread_write+0x692/0x2a70
[ 1316.862130]  ? binder_transaction+0x78d0/0x78d0
[ 1316.901178]  ? binder_get_thread+0x287/0x980
[ 1316.905589]  ? binder_ioctl+0x24e/0x1920
[ 1316.909648]  ? __ia32_compat_sys_ioctl+0x197/0x620
[ 1316.914578]  ? do_fast_syscall_32+0x333/0xf98
[ 1316.919162]  ? entry_SYSENTER_compat+0x70/0x7f
[ 1316.923766]  ? __might_fault+0x12b/0x1e0
[ 1316.927837]  ? find_held_lock+0x35/0x120
[ 1316.931905]  ? __might_fault+0x12b/0x1e0
[ 1316.935979]  ? lock_acquire+0x1db/0x570
[ 1316.939978]  ? lock_downgrade+0x910/0x910
[ 1316.944143]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1316.949679]  ? _copy_from_user+0xdd/0x150
[ 1316.953869]  binder_ioctl_write_read.isra.0+0x303/0xb60
[ 1316.959230]  ? __init_waitqueue_head+0x92/0x150
[ 1316.963913]  ? binder_thread_write+0x2a70/0x2a70
[ 1316.968667]  ? _raw_spin_unlock+0x2d/0x50
[ 1316.972838]  ? binder_get_thread+0x1f3/0x980
[ 1316.977703]  ? binder_free_ref+0xb0/0xb0
[ 1316.981765]  ? rcu_lockdep_current_cpu_online+0x1aa/0x220
[ 1316.987320]  ? rcu_pm_notify+0xd0/0xd0
[ 1316.991219]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1316.996758]  ? __might_sleep+0x95/0x190
[ 1317.000739]  binder_ioctl+0x424/0x1920
19:42:14 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x2801, 0x0)
ioctl$sock_ifreq(0xffffffffffffff9c, 0x8977, &(0x7f00000000c0)={'rose0\x00', @ifru_addrs=@can={0x1d, <r1=>0x0}})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000100)={r1, 0x1, 0x6, @broadcast}, 0x10)
r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:14 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014700000072d907000f510007140028", 0x22)

19:42:14 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000197000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1317.004635]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1317.010176]  ? iterate_fd+0x4b0/0x4b0
[ 1317.013988]  ? wait_for_completion+0x810/0x810
[ 1317.018588]  ? check_preemption_disabled+0x48/0x290
[ 1317.023697]  ? __fget_light+0x2db/0x420
[ 1317.027672]  ? fget_raw+0x20/0x20
[ 1317.031158]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1317.036709]  ? do_fast_syscall_32+0x13b/0xf98
[ 1317.041227]  ? do_fast_syscall_32+0x13b/0xf98
[ 1317.045726]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1317.050297]  ? trace_hardirqs_on+0xbd/0x310
[ 1317.054637]  ? security_file_ioctl+0x93/0xc0
[ 1317.059062]  ? binder_ioctl_write_read.isra.0+0xb60/0xb60
[ 1317.064583]  __ia32_compat_sys_ioctl+0x197/0x620
[ 1317.069323]  do_fast_syscall_32+0x333/0xf98
[ 1317.073636]  ? do_int80_syscall_32+0x880/0x880
[ 1317.078216]  ? trace_hardirqs_off+0x310/0x310
[ 1317.082695]  ? syscall_return_slowpath+0x3b0/0x5f0
[ 1317.087690]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1317.093238]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1317.098243]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1317.103073]  entry_SYSENTER_compat+0x70/0x7f
[ 1317.107474] RIP: 0023:0xf7feb869
[ 1317.110818] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1317.129805] RSP: 002b:00000000f5de70cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1317.137503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201
[ 1317.144778] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000
19:42:15 executing program 1 (fault-call:1 fault-nth:4):
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:15 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:15 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000098000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:15 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004800000072d907000f510007140028", 0x22)

19:42:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006880"], 0x0, 0x0, 0x0})

[ 1317.152117] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1317.159395] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1317.166648] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1317.178114] binder_alloc: binder_alloc_new_buf_locked: 10471 failed to alloc new buffer struct
19:42:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2)
write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0xffffffffffffffda, 0x1, {0xfff}}, 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1317.237281] __nla_parse: 58 callbacks suppressed
[ 1317.253642] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1317.272276] input input120: cannot allocate more than FF_MAX_EFFECTS effects
19:42:15 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff}, 0x80000)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000140)={0x48, 0x6, 0x0, {0x6, 0x1, 0x1f, 0x0, '*:vboxnet0.(keyringcgroupvmnet0'}}, 0x48)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x41)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000080)={0x1000, 0x800, 0x3, 0x1, 0x3, 0x2, 0x9, 0x1f, 0x0, 0xffffffff, 0xffffffff, 0x1})
socketpair(0x9, 0x1, 0xc81, &(0x7f0000000040))
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00', {0x9, 0x0, 0x5, 0x959}, 0x4c, [0x6, 0x1, 0x1ff, 0x1f, 0xe6, 0xffffffffffffff00, 0x20, 0x6, 0x1, 0x7ff, 0xbf, 0x9d0c, 0x362d36d1, 0x1, 0x2, 0x2, 0x2, 0x9, 0xeef0, 0x6, 0x101, 0x8, 0xffffffff, 0x1, 0x40, 0x9, 0xc581, 0x6, 0x2, 0x20, 0x100000001, 0x6, 0xe5bc, 0x400, 0x9b, 0x3, 0xfffffffffffffff7, 0x1, 0x21c, 0x4, 0x6, 0x4843, 0x200, 0x0, 0x6, 0x401, 0x5, 0x3, 0x2, 0x8, 0x8365, 0x88cb, 0x10000, 0x8, 0x3, 0x80000001, 0x3, 0x2, 0x7, 0x100, 0xeff, 0xffffffff, 0x5, 0x4], [0x98d0, 0xff, 0x1, 0x8, 0x9, 0x8, 0x4, 0x76, 0xd4e, 0xade7, 0x200, 0x4, 0x7fff, 0x2679, 0x80, 0x1000, 0x1, 0x2, 0x5, 0x200, 0x10000, 0x75, 0xa00, 0x1, 0x5, 0x8000, 0xffffffff, 0x10000, 0x301, 0xffffffffffff7fff, 0x1, 0x7, 0x9d, 0xffff, 0x4, 0xcd2, 0x6, 0x5, 0x1000, 0x1, 0x80000000, 0x1, 0x3, 0xffffffff, 0x1, 0x0, 0x10000, 0x3, 0x6, 0x56, 0x3, 0x9, 0x5, 0x3, 0x7, 0x3, 0x800, 0x30a, 0x4, 0x6, 0x7ff, 0x8, 0x34, 0x51], [0x6, 0x2fe7, 0x5, 0x4, 0xffffffff7fffffff, 0x0, 0x181e0000, 0x7fffffff, 0x9, 0x8, 0x9, 0xfffffffffffff9e4, 0x0, 0x9, 0x2, 0x5, 0x3f, 0x8, 0x7ff, 0x6d17, 0x5, 0x400, 0x2c3, 0x4, 0x0, 0x3, 0xffff, 0xfffffffffffffffd, 0x7fffffff, 0x7fffffff, 0x3ff, 0xffffffffffffffff, 0x96, 0x10001, 0x9, 0x0, 0x7b0, 0x10001, 0x4, 0x4, 0x62, 0x2294, 0xfffffffffffffffc, 0x1, 0x5ae, 0x9, 0x1, 0x10001, 0xfffffffffffffff9, 0x400, 0xe2a, 0x3849, 0x39b6, 0x7c2e, 0x64f, 0x0, 0x8, 0x401, 0x3, 0x81, 0x0, 0x1, 0x7, 0x40], [0xfff, 0x70, 0x4, 0x3ff, 0x1, 0x13ff, 0x100, 0x7, 0x6, 0xfff, 0xfffffffffffffff8, 0xffff, 0x2, 0xffffffffffffff00, 0x690, 0xffff, 0x4, 0x8, 0x0, 0x80000001, 0x1, 0x3f, 0x401, 0x9, 0x80000000, 0x1000, 0x9, 0x7, 0x1, 0x9, 0x8, 0x3df, 0x1000, 0x8001, 0x7f, 0xfffffffffffffa84, 0x6, 0x4, 0x400, 0xd9da, 0x4, 0x959, 0x7, 0x81, 0x100000001, 0x570, 0x20, 0x7, 0xd794, 0x6, 0x1, 0x3, 0x41e21ab6, 0x6, 0xc721, 0x49, 0x4, 0x5, 0x9, 0x8001, 0x101, 0x3, 0x9f87, 0x4]}, 0x45c)

[ 1317.308362] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1317.317724] binder_alloc_new_buf_locked: 37 callbacks suppressed
[ 1317.317733] binder_alloc: 10471: binder_alloc_buf size 551500644352 failed, no address space
19:42:15 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014800000072d907000f510007140028", 0x22)

[ 1317.377406] binder_alloc_new_buf_locked: 37 callbacks suppressed
[ 1317.377421] binder_alloc: allocated: 1200 (num: 129 largest: 32), free: 11088 (num: 1 largest: 11088)
[ 1317.398747] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1317.401923] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
19:42:15 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000198000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1317.422564] binder_release_work: 4 callbacks suppressed
[ 1317.422569] binder: undelivered TRANSACTION_COMPLETE
[ 1317.424618] input input122: cannot allocate more than FF_MAX_EFFECTS effects
[ 1317.443865] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c80"], 0x0, 0x0, 0x0})

19:42:15 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x100000200802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1317.497063] binder_alloc: allocated: 1208 (num: 130 largest: 32), free: 11080 (num: 1 largest: 11080)
19:42:15 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004900000072d907000f510007140028", 0x22)

[ 1317.537332] binder_transaction: 41 callbacks suppressed
[ 1317.537351] binder: 4861:4863 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1317.562589] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:15 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)

[ 1317.598462] binder: undelivered TRANSACTION_COMPLETE
[ 1317.606619] binder_alloc: 10471: binder_alloc_buf size 551567753216 failed, no address space
[ 1317.628334] binder_release_work: 41 callbacks suppressed
[ 1317.628340] binder: undelivered TRANSACTION_ERROR: 29201
19:42:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:15 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000099000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:15 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c6300000063404000000000000000000000000000000000000000000000000000005de47f720000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1317.649402] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1317.670189] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1317.717698] binder: 4893:4895 ioctl 2 20000040 returned -22
[ 1317.759354] binder: 4883:4884 transaction failed 29201/-28, size 0-551567753216 line 3035
[ 1317.772802] input input125: cannot allocate more than FF_MAX_EFFECTS effects
[ 1317.790855] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:15 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014900000072d907000f510007140028", 0x22)

[ 1317.804756] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1317.814905] binder: undelivered TRANSACTION_ERROR: 29201
[ 1317.825543] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:15 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = getpgid(0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={<r2=>0x0}, &(0x7f0000000040)=0x4)
rt_tgsigqueueinfo(r1, r2, 0xd, &(0x7f0000000080)={0x30, 0xab9b, 0x6})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1317.850726] binder: 4908:4909 ioctl 541b 20000040 returned -22
[ 1317.856800] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
19:42:15 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000000199000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1317.893713] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1317.921695] binder: 4902:4903 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1317.921712] binder_alloc: 10471: binder_alloc_buf size 551567753216 failed, no address space
19:42:15 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1317.961489] binder: undelivered TRANSACTION_ERROR: 29201
[ 1317.967659] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1317.981654] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1317.991805] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1318.000897] binder: 4883:4884 transaction failed 29201/-28, size 0-551567753216 line 3035
[ 1318.006985] input input128: cannot allocate more than FF_MAX_EFFECTS effects
[ 1318.016075] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1318.030741] binder: undelivered TRANSACTION_ERROR: 29201
[ 1318.039802] binder: 4902:4903 transaction failed 29201/-28, size 0-549755813888 line 3035
19:42:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007480"], 0x0, 0x0, 0x0})

19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004a00000072d907000f510007140028", 0x22)

19:42:16 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1318.086381] binder: undelivered TRANSACTION_ERROR: 29201
19:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x10d, 0x0, 0x0})

19:42:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1318.177001] binder_alloc: 10471: binder_alloc_buf size 551701970944 failed, no address space
[ 1318.215587] input input131: cannot allocate more than FF_MAX_EFFECTS effects
19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014a00000072d907000f510007140028", 0x22)

[ 1318.238273] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
19:42:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019a000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1318.305971] binder: 4931:4932 transaction failed 29201/-28, size 0-551701970944 line 3035
[ 1318.316313] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1318.337119] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1318.347708] binder: 4938:4940 transaction failed 29201/-28, size 0-549755813888 line 3035
19:42:16 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x800, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004b00000072d907000f510007140028", 0x22)

[ 1318.369389] binder: undelivered TRANSACTION_ERROR: 29201
[ 1318.382779] binder: 4938:4940 ioctl c0306201 20000040 returned -14
19:42:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000007a80"], 0x0, 0x0, 0x0})

[ 1318.427002] binder: undelivered TRANSACTION_ERROR: 29201
19:42:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:16 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = semget$private(0x0, 0x4, 0x200)
semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000000)=""/67)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000180)=0xe8)
ioprio_get$uid(0x3, r1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

[ 1318.565903] binder_alloc: 10471: binder_alloc_buf size 551802634240 failed, no address space
19:42:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019b000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014b00000072d907000f510007140028", 0x22)

[ 1318.633129] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1318.681902] input input134: cannot allocate more than FF_MAX_EFFECTS effects
[ 1318.698443] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1318.708763] binder: 4971:4972 transaction failed 29201/-28, size 0-551802634240 line 3035
19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004c00000072d907000f510007140028", 0x22)

[ 1318.732460] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1318.753108] binder: undelivered TRANSACTION_ERROR: 29201
19:42:16 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:16 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x800)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000880)={&(0x7f00000003c0)='./file0\x00', r0}, 0x10)
recvfrom$inet6(r0, &(0x7f0000000300)=""/109, 0x6d, 0x100, &(0x7f0000000380)={0xa, 0x4e23, 0x2, @empty, 0x3f}, 0x1c)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5a7b, 0x181240)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
mount(&(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='udf\x00', 0x200000, &(0x7f0000000280)='syz1\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x900, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4d2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

19:42:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1318.786904] binder: 4980:4981 transaction failed 29201/-28, size 0-549755813888 line 3035
19:42:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x2, 0x0, 0x0})

[ 1318.877331] binder: undelivered TRANSACTION_ERROR: 29201
[ 1318.908714] binder: BINDER_SET_CONTEXT_MGR already set
19:42:16 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014c00000072d907000f510007140028", 0x22)

19:42:16 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x0, 0x5)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x4, [0x40, 0x1, 0x3f, 0x0]}, &(0x7f00000000c0)=0xc)

[ 1318.931918] input input136: cannot allocate more than FF_MAX_EFFECTS effects
[ 1318.935460] binder: 5008:5009 ioctl 40046207 20000040 returned -16
[ 1318.953587] binder: 5012:5013 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1318.969205] binder: 5012:5013 ioctl c0306201 20000040 returned -14
[ 1318.988092] input input137: cannot allocate more than FF_MAX_EFFECTS effects
19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019c000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1319.029171] binder: undelivered TRANSACTION_ERROR: 29201
19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004d00000072d907000f510007140028", 0x22)

19:42:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x3, 0x0, 0x0})

19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:17 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x200, 0x0)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x4c4, 0x1, 0x9, 0x1c, "abc6c8bf97f4c8178fcac209e86b4caffbc3abc8f2696d757e2c94d6b0bc144f0d0be516e71081e28a3489fac893a81e157abcc4e314b4625a6c0b14f080842a", "2b40ac8805b4570197ead64067fdec52583559ece9176b129316b662e97fd6d6", [0x8, 0x100000000]})
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x111, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000380)={0x10, 0x30, 0xfa00, {&(0x7f00000002c0), 0x1, {0xa, 0x4e24, 0xfffffffffffffe00, @rand_addr="1269c78e8206480e80271f94b69c77c4", 0x401}, r2}}, 0x38)
lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000003c0)=<r3=>0x0)
ptrace$setsig(0x4203, r3, 0x9, &(0x7f0000000880)={0x1c, 0x7f, 0x10000})
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0)
ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000040))
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f0000000080)="026633374e3c4568ef068bd792c217366a30c2a137bd9752c28095755fe030be58f84219", 0x24)

19:42:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYPTR, @ANYRES64=0x0], 0x463816a7ccaa9e96, 0x0, 0x0})

[ 1319.191657] binder: 5039:5040 ioctl c0306201 20000040 returned -14
19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014d00000072d907000f510007140028", 0x22)

19:42:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1319.268420] input input138: cannot allocate more than FF_MAX_EFFECTS effects
[ 1319.305736] binder: 5053:5054 unknown command 0
[ 1319.314083] input input139: cannot allocate more than FF_MAX_EFFECTS effects
19:42:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4, 0x0, 0x0})

19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019d000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1319.340203] binder: 5053:5054 ioctl c0306201 20000040 returned -22
19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004e00000072d907000f510007140028", 0x22)

19:42:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40, 0x0)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f00000000c0)=0xd7dd)

19:42:17 executing program 2:
r0 = getpgrp(0x0)
ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000280))
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x111, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {r3, 0xce, "ec69bd", "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"}}, 0x110)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f00000000c0)={0x7})

[ 1319.435393] binder: 5064:5065 ioctl c0306201 20000040 returned -14
19:42:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x5, 0x0, 0x0})

19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014e00000072d907000f510007140028", 0x22)

[ 1319.571610] input input140: cannot allocate more than FF_MAX_EFFECTS effects
19:42:17 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)

19:42:17 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x53032da0, 0x480100)
write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000000c0), 0x2)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000140)={<r2=>0x0, 0xff, 0x30, 0xb, 0x1}, &(0x7f0000000180)=0x18)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x400}, &(0x7f0000000200)=0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x7, 0x81)

[ 1319.648362] binder: 5088:5089 ioctl c0306201 20000040 returned -14
19:42:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1319.732959] binder: 5088:5089 ioctl c0306201 20000040 returned -14
19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000004f00000072d907000f510007140028", 0x22)

19:42:17 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:17 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000014f00000072d907000f510007140028", 0x22)

19:42:17 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300ffffff9e000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6, 0x0, 0x0})

19:42:17 executing program 0:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100))
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10b000, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x351, 0x0)
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0})

19:42:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:18 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000080)={0x8, {0xffffffffffffffff, 0xfffffffffffffff8, 0x34, 0x2, 0x1b1}})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

[ 1319.940163] input input144: cannot allocate more than FF_MAX_EFFECTS effects
[ 1320.107881] binder: 5127:5128 ioctl c0306201 20000040 returned -14
19:42:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005000000072d907000f510007140028", 0x22)

19:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x3b2, 0x0, &(0x7f00000000c0)=ANY=[], 0x259, 0x0, 0x0})

19:42:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000009f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1320.169389] input input146: cannot allocate more than FF_MAX_EFFECTS effects
19:42:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x7, 0x0, 0x0})

19:42:18 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x6, {0xfffffffffffff001, 0x0, 0x6, 0xaf1}, {0x7, 0x0, 0x4, 0x7fff}, {0xa0c, 0x5}})

19:42:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1320.298034] binder: 5146:5148 unknown command 0
19:42:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece03000000019f000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015000000072d907000f510007140028", 0x22)

[ 1320.347476] binder: 5146:5148 ioctl c0306201 20000080 returned -22
[ 1320.348660] binder: 5152:5155 ioctl c0306201 20000040 returned -14
19:42:18 executing program 2:
clone(0x81800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x806, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x45c)
io_setup(0x3, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101000)
io_cancel(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000880)="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", 0x1000, 0x7, 0x0, 0x1, r2}, &(0x7f0000000100))
arch_prctl$ARCH_GET_CPUID(0x1011)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1320.395231] binder: 5146:5148 unknown command 0
[ 1320.400879] input input147: cannot allocate more than FF_MAX_EFFECTS effects
[ 1320.415959] binder: 5146:5148 ioctl c0306201 20000080 returned -22
19:42:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x12, 0x0, 0x0})

19:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0xfffffffffffffecf, 0x0, 0x0})

19:42:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005100000072d907000f510007140028", 0x22)

19:42:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a0000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:18 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80000, 0x0)
fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0xfe)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

[ 1320.518837] input input150: cannot allocate more than FF_MAX_EFFECTS effects
19:42:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015100000072d907000f510007140028", 0x22)

19:42:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1320.628250] binder: 5181:5186 ioctl c0306201 20000040 returned -14
[ 1320.643537] binder: 5190:5191 ioctl c0306201 20000040 returned -14
[ 1320.666324] input input152: cannot allocate more than FF_MAX_EFFECTS effects
19:42:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a0000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:18 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)

19:42:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x48, 0x0, 0x0})

19:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})

19:42:18 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005200000072d907000f510007140028", 0x22)

19:42:18 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a1000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1320.811473] binder: 5204 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[ 1320.811485] binder: 5204:5207 ioctl c018620c 20000040 returned -22
[ 1320.829441] input input153: cannot allocate more than FF_MAX_EFFECTS effects
[ 1320.840093] binder: 5211:5212 ioctl c0306201 20000040 returned -14
19:42:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4c, 0x0, 0x0})

19:42:18 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f00000000c0)=0x116001)

19:42:18 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [], [0x1]}, 0x45c)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/99, 0x63}, {&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000140)=""/244, 0xf4}], 0x3)

19:42:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a1000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015200000072d907000f510007140028", 0x22)

19:42:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000fc0000bc0000ae15a68f80b48d5a870ff6bd0a00000000000000000000000000040000000000000000"], 0x0, 0x0, 0x0})

[ 1321.076291] binder: 5229:5238 ioctl c0306201 20000040 returned -14
19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:19 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syncfs(r0)

19:42:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x60, 0x0, 0x0})

19:42:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a2000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005300000072d907000f510007140028", 0x22)

19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1321.259776] binder: 5256:5257 ioctl c0306201 20000040 returned -14
19:42:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630063404000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000"], 0x0, 0x0, 0x0})
dup2(r0, r0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101000, 0x0)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1)

19:42:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x68, 0x0, 0x0})

[ 1321.335359] binder: 5266:5267 unknown command 0
[ 1321.351390] input input157: cannot allocate more than FF_MAX_EFFECTS effects
[ 1321.367800] binder: 5266:5267 ioctl c0306201 20000040 returned -22
19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015300000072d907000f510007140028", 0x22)

19:42:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a2000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x1200, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1321.440420] binder: 5274:5276 ioctl c0306201 20000040 returned -14
19:42:19 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000040))
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1321.482513] binder: 5277:5278 unknown command 1660969740
[ 1321.499476] binder: 5277:5278 ioctl c0306201 20000040 returned -22
19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005400000072d907000f510007140028", 0x22)

19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x1000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1321.561462] binder: 5277:5278 unknown command 1660969740
[ 1321.601447] binder: 5277:5278 ioctl c0306201 20000040 returned -22
19:42:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6c, 0x0, 0x0})

[ 1321.611501] input input160: cannot allocate more than FF_MAX_EFFECTS effects
19:42:19 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0)
r2 = dup(r0)
linkat(r1, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x400)
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x408000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)={0x2002})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a3000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x240, 0x0)
ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000000f81f000000000000000007000000002000000100000000000000ff7f0000000000000905000000000000030000000000000088060000000000000101000000000000018000000000000006000000000000000000000000000000000000000000000000080000000000000000000000000000bdf8000000000000ffffffffffffffff"])
syz_open_dev$rtc(&(0x7f0000000180)='/dev/rtc#\x00', 0x8, 0x80000)

19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015400000072d907000f510007140028", 0x22)

19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x12000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1321.739058] binder: 5301:5302 ioctl c0306201 20000040 returned -14
19:42:19 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$CAPI_NCCI_OPENCOUNT(r1, 0x80044326, &(0x7f0000000280)=0x6)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x16, 0xd7, 0xb, 0x20, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd28, 0x3500}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_x_sa2={0x2, 0x13, 0x1, 0x0, 0x0, 0x70bd2d}, @sadb_address={0x5, 0x7, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x14}, 0x7fff}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bb8, 0x5, {0x6, 0xff, 0x800, 0x3ff, 0x0, 0x4, 0x0, @in6=@remote, @in=@empty}}, @sadb_lifetime={0x4, 0x3, 0x10001, 0xd6, 0x100000000, 0x10001}, @sadb_x_nat_t_type={0x1, 0x14, 0x200}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @loopback}}]}, 0x100}}, 0x10)

[ 1321.806645] input input161: cannot allocate more than FF_MAX_EFFECTS effects
[ 1321.820416] QAT: Invalid ioctl
19:42:19 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005500000072d907000f510007140028", 0x22)

19:42:19 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0xfdfdffff, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x74, 0x0, 0x0})

19:42:19 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x2d5, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0})
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x1, 0x1)

19:42:19 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a3000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015500000072d907000f510007140028", 0x22)

[ 1322.016785] binder: 5335:5336 unknown command 0
[ 1322.029113] binder: 5344:5345 ioctl c0306201 20000040 returned -14
[ 1322.045602] binder: 5335:5336 ioctl c0306201 20000040 returned -22
19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0xfffffdfd, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1322.065169] binder: 5335:5336 unknown command 0
19:42:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a4000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:20 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {0x1921afc2, 0x2, 0x3, 0x100000001}, 0x49, [0x8, 0x9, 0x9, 0x9, 0x1fc000, 0x9, 0x7, 0xfffffffffffffffe, 0x80, 0x574, 0x2, 0x6, 0x4, 0x0, 0x9, 0x9, 0x4, 0x5, 0x6, 0x100000000, 0x0, 0x7f, 0x7, 0x0, 0x7f, 0x0, 0x1, 0x7, 0xfffffffffffffffa, 0x100000000, 0x1, 0x7, 0x9, 0xfffffffffffffffd, 0x9, 0x2, 0x1, 0x20, 0x3ff, 0x5, 0x6, 0xffff, 0x43a8, 0x3f, 0x4, 0xac9e, 0x9, 0x2, 0x6, 0x8, 0x8, 0x17, 0xfffffffffffffffa, 0x7, 0xa70, 0x1, 0x71f9, 0xffff, 0x1ff, 0x8, 0x8, 0x80000000, 0x8, 0x8], [0x1, 0x0, 0xd0c, 0x31, 0xa3, 0x6, 0x4, 0x7, 0x6, 0x5, 0x1f, 0x5, 0x5, 0x7, 0xcd03, 0x2bd, 0x6, 0x8, 0x7fff, 0x4, 0xe8b, 0x5, 0x1, 0x9d4c, 0x7, 0xfff, 0x6, 0x8, 0x4, 0x0, 0x0, 0x81, 0x7ff, 0x20, 0x8001, 0x5, 0x9e40, 0xffffffffffffffc1, 0xfffffffffffffffb, 0x2, 0x5, 0x5, 0x7, 0x5, 0x9, 0x7, 0x9, 0x6, 0x7fffffff, 0x80000000, 0x3, 0x0, 0x4000000000000000, 0x7fc000000, 0x81, 0x63a, 0xf2, 0x4, 0x81, 0x6, 0x3595, 0x0, 0x5, 0x3], [0xffffffffffffff7f, 0xb09, 0x5b0, 0x1, 0x471b, 0x7, 0x1ff, 0x81, 0x100, 0x9, 0x4, 0x0, 0x2, 0x8000, 0x800, 0x20, 0x5, 0x4, 0x1, 0x7acc, 0x0, 0x7, 0x1, 0x6, 0x6, 0x1, 0x8, 0x1, 0xbaf, 0x8, 0x9, 0x80, 0x81, 0x3, 0xff, 0x0, 0x3, 0x3, 0x190000000000000, 0xffffffffffffff7f, 0x200, 0x100, 0xffffffffffffc99e, 0x4, 0x100, 0xfff, 0x100, 0xfffffffffffffffb, 0x3ff, 0x3f, 0x3, 0x7, 0x9, 0x0, 0xffff, 0x5, 0x8, 0x101, 0x4, 0x200, 0x4, 0x7, 0x3a0, 0x1], [0x1, 0x4, 0x0, 0x1, 0x5, 0x1, 0x1, 0x8, 0x40, 0x0, 0x7ff, 0x7, 0x400, 0x6, 0x10000, 0x2d, 0x0, 0x4, 0x69, 0x0, 0x81, 0x2ae, 0x7, 0x0, 0x400, 0xc0000000000000, 0x3, 0x5, 0x1, 0x8000, 0x3f, 0x8, 0x80000001, 0x1, 0x40, 0x1, 0x100000001, 0x9, 0x5, 0x6, 0x2, 0x88c4, 0x4, 0x5, 0x80000000, 0x727, 0xfffffffffffffffe, 0xfffffffffffffff7, 0xfc00000000000000, 0x200000000000000, 0x0, 0x80, 0x0, 0x9, 0x0, 0x20, 0xfffffffffffffffd, 0x564, 0x4, 0x9, 0x0, 0x200, 0x100, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x7a, 0x0, 0x0})

[ 1322.120942] binder: 5335:5336 ioctl c0306201 20000040 returned -22
19:42:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000"], 0x0, 0x0, 0x0})
r1 = dup(r0)
ioctl$KDDELIO(r1, 0x4b35, 0x3ff)

19:42:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005600000072d907000f510007140028", 0x22)

[ 1322.209255] binder: 5360:5362 ioctl c0306201 20000040 returned -14
[ 1322.224209] input: syz0 as /devices/virtual/input/input166
19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x7ffffffff000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a4000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1322.281926] input: syz0 as /devices/virtual/input/input167
[ 1322.308215] __nla_parse: 71 callbacks suppressed
[ 1322.308225] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x300, 0x0, 0x0})

19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0xf0ffffff7f0000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1322.354042] binder_alloc_new_buf_locked: 26 callbacks suppressed
[ 1322.354052] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1322.385420] binder_alloc_new_buf_locked: 26 callbacks suppressed
[ 1322.385435] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1322.426526] binder: 5375:5382 ioctl 4b35 3ff returned -22
[ 1322.435521] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1322.460517] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:20 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x37, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c630000006340400000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000"], 0x0, 0x0, 0x0})

19:42:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015600000072d907000f510007140028", 0x22)

19:42:20 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x100000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a5000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1322.529799] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1322.602424] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1322.620713] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1322.640204] input input168: cannot allocate more than FF_MAX_EFFECTS effects
[ 1322.649167] binder_transaction: 27 callbacks suppressed
[ 1322.649183] binder: 5389:5390 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1322.649766] binder_alloc: 10471: binder_alloc_buf size 1407374883553280 failed, no address space
[ 1322.654995] binder: 5389:5390 ioctl c0306201 20000040 returned -14
[ 1322.670586] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1322.682924] binder_release_work: 27 callbacks suppressed
[ 1322.682930] binder: undelivered TRANSACTION_ERROR: 29201
19:42:20 executing program 2:
clone(0x20000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x8000, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f00000001c0)=0xfa9)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0xfffffffffffffffc})
fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x1, 0x4}, {0x1}]}, 0x14, 0x2)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000000)={0x2, 0x4, 0x200})

[ 1322.693590] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x500, 0x0, 0x0})

19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x1200000000000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1322.731746] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1322.764867] binder: 5392:5396 transaction failed 29201/-28, size 1407374883553280-0 line 3035
19:42:20 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a5000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1322.818303] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1322.824608] binder: undelivered TRANSACTION_ERROR: 29201
19:42:20 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005700000072d907000f510007140028", 0x22)

[ 1322.862000] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
[ 1322.878743] input input170: cannot allocate more than FF_MAX_EFFECTS effects
19:42:20 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000681000)=@abs, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x793a368cff4c0ced)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x13)

[ 1322.903767] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0xfdfdffff00000000, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1322.946121] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1322.952024] binder: 5412:5415 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1322.973391] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
19:42:21 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1c5)

[ 1323.010067] binder: 5412:5415 ioctl c0306201 20000040 returned -14
[ 1323.018452] input input173: cannot allocate more than FF_MAX_EFFECTS effects
19:42:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a6000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015700000072d907000f510007140028", 0x22)

19:42:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\vc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1323.074507] input input175: cannot allocate more than FF_MAX_EFFECTS effects
[ 1323.088111] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1323.092044] binder: undelivered TRANSACTION_ERROR: 29201
[ 1323.109027] binder_alloc: allocated: 1216 (num: 131 largest: 32), free: 11072 (num: 1 largest: 11072)
19:42:21 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x408200, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
bind(r1, &(0x7f0000000000)=@nl=@unspec, 0x80)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1323.118966] binder: 5412:5415 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1323.157183] binder: 5443:5444 ERROR: BC_REGISTER_LOOPER called without request
[ 1323.172663] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1323.188330] binder: 5412:5415 ioctl c0306201 20000040 returned -14
19:42:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a6000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1323.207380] binder: undelivered TRANSACTION_ERROR: 29201
[ 1323.221801] input input178: cannot allocate more than FF_MAX_EFFECTS effects
[ 1323.229976] binder: undelivered TRANSACTION_COMPLETE
19:42:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x600, 0x0, 0x0})

19:42:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005800000072d907000f510007140028", 0x22)

19:42:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\rc\x00\x00\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:21 executing program 2:
clone(0x90004, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="0e0000000000000005ffc5230083bfd96c8352060000666540f115f405a903005d04359500e8a1d7cc7c8809a4000000000000000000000000000000"], 0x2f)

[ 1323.346232] binder: undelivered TRANSACTION_COMPLETE
[ 1323.362103] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1323.363718] binder: undelivered TRANSACTION_COMPLETE
[ 1323.404236] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1323.417685] binder: 5471:5472 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1323.453296] binder: 5471:5472 ioctl c0306201 20000040 returned -14
[ 1323.463745] binder: undelivered TRANSACTION_ERROR: 29201
19:42:21 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r0, &(0x7f00000bc000)=@abs, 0x8)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0)
connect$unix(r0, &(0x7f00003de000)=@file={0x1, './file0\x00'}, 0xa)
connect$unix(r0, &(0x7f0000681000)=@abs, 0x8)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040)=0x793a368cff4c0ced)
write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x13)

19:42:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015800000072d907000f510007140028", 0x22)

19:42:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a7000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1263000000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x700, 0x0, 0x0})

19:42:21 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x480200)
openat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x110, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040001)
ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f0000000040))
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

[ 1323.777870] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1323.799706] input input182: cannot allocate more than FF_MAX_EFFECTS effects
[ 1323.806799] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1323.817647] binder: 5489:5491 unknown command 25362
19:42:21 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000655800000072d907000f510007140028", 0x22)

19:42:21 executing program 2:
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=<r0=>0x0)
r1 = dup(0xffffffffffffffff)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)='\\vmnet1\x00', <r2=>0xffffffffffffffff}, 0x30)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000300)={0x1, 0x9, {0x53, 0x3ff, 0x0, {0x4}, {0x9, 0xfffffffffffffe01}, @period={0x59, 0x8, 0x1, 0x0, 0x4, {0x408000, 0x0, 0x1075}, 0x2, &(0x7f00000002c0)=[0x3ff, 0x40]}}, {0x57, 0xffffffff, 0x3ff, {0x4, 0x400}, {0x6, 0x3}, @rumble={0x8ef3, 0xe4}}})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000c00)={<r3=>0x0, 0x3}, &(0x7f0000000c40)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000c80)={r3, 0xa}, &(0x7f0000000cc0)=0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r0, r1, 0x0, 0xc, &(0x7f0000000040)='/dev/uinput\x00', r2}, 0x30)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r5 = semget$private(0x0, 0x1, 0x380)
lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
getresgid(&(0x7f00000009c0)=<r8=>0x0, &(0x7f0000000a00), &(0x7f0000000a40))
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000a80)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000b80)=0xe8)
getgid()
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000bc0)={{0x1ff, r6, r8, r9, r7, 0x81, 0x800000000800}, 0x20, 0x1, 0x100})
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc0080}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x1c}}, 0x4040810)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000880)={{0x2e0, 0x0, 0x3f, 0xb1a5}, 'syz1\x00', 0x35})
write$uinput_user_dev(r4, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200]}, 0x45c)
ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0)

[ 1323.831778] binder: 5489:5491 ioctl c0306201 20000040 returned -22
[ 1323.852456] binder: 5484:5485 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1323.871731] binder: 5484:5485 ioctl c0306201 20000040 returned -14
19:42:21 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a7000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1323.878438] binder: 5489:5491 unknown command 25362
[ 1323.895201] input input184: cannot allocate more than FF_MAX_EFFECTS effects
[ 1323.914436] binder: 5489:5491 ioctl c0306201 20000040 returned -22
[ 1323.924578] binder: undelivered TRANSACTION_ERROR: 29201
19:42:21 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250e0000005c00030008000300030000001400020064756d6d793000000000000000000000080007004e2300000800030004000000080004001f00000008000500ac1414aa080007004e2400001400060000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1200, 0x0, 0x0})

19:42:22 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005900000072d907000f510007140028", 0x22)

[ 1324.060668] input input186: cannot allocate more than FF_MAX_EFFECTS effects
[ 1324.078554] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1324.081105] 
[ 1324.088796] =====================================================
[ 1324.089676] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1324.095020] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
19:42:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0263044000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1324.095029] 5.0.0-rc3+ #43 Not tainted
[ 1324.095038] -----------------------------------------------------
[ 1324.118265] syz-executor0/5513 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1324.120816] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1324.125436] 0000000069a9fb10 (&fiq->waitq){+.+.}, at: aio_poll+0x7b9/0x14e0
[ 1324.125468] 
[ 1324.125468] and this task is already holding:
[ 1324.135014] kobject: 'input186' (000000004ac07442): kobject_cleanup, parent           (null)
[ 1324.141973] 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: aio_poll+0x790/0x14e0
[ 1324.142000] which would create a new lock dependency:
[ 1324.142002]  (&(&ctx->ctx_lock)->rlock){..-.} -> (&fiq->waitq){+.+.}
[ 1324.152893] kobject: 'input186' (000000004ac07442): calling ktype release
[ 1324.156519] 
[ 1324.156519] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1324.156521]  (&(&ctx->ctx_lock)->rlock){..-.}
[ 1324.156532] 
[ 1324.156532] ... which became SOFTIRQ-irq-safe at:
[ 1324.156550]   lock_acquire+0x1db/0x570
[ 1324.156570]   _raw_spin_lock_irq+0x60/0x80
[ 1324.166511] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1324.169950]   free_ioctx_users+0xa7/0x6e0
[ 1324.169965]   percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0
[ 1324.169979]   rcu_process_callbacks+0xc4a/0x1680
[ 1324.169996]   __do_softirq+0x30b/0xb11
[ 1324.176559] binder: 5515:5516 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1324.183380]   irq_exit+0x180/0x1d0
[ 1324.183394]   smp_apic_timer_interrupt+0x1b7/0x760
[ 1324.183409]   apic_timer_interrupt+0xf/0x20
19:42:22 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a8000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1324.183424]   kmem_cache_free+0xab/0x260
[ 1324.183436]   unlink_anon_vmas+0x3ab/0xa50
[ 1324.183452]   free_pgtables+0x1af/0x2f0
[ 1324.192678] kobject: 'input186': free name
[ 1324.195966]   exit_mmap+0x2e3/0x5d0
[ 1324.195980]   mmput+0x240/0x640
[ 1324.195997]   flush_old_exec+0xb6d/0x21a0
[ 1324.212990] input input187: cannot allocate more than FF_MAX_EFFECTS effects
[ 1324.219728]   load_elf_binary+0xa70/0x5580
[ 1324.219743]   search_binary_handler+0x17f/0x570
[ 1324.219756]   __do_execve_file.isra.0+0x14f3/0x2700
[ 1324.219766]   __x64_sys_execve+0x8f/0xc0
[ 1324.219785]   do_syscall_64+0x1a3/0x800
[ 1324.224007] binder: 5515:5516 ioctl c0306201 20000040 returned -14
[ 1324.229434]   entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.229439] 
[ 1324.229439] to a SOFTIRQ-irq-unsafe lock:
[ 1324.229442]  (&fiq->waitq){+.+.}
[ 1324.229452] 
[ 1324.229452] ... which became SOFTIRQ-irq-unsafe at:
[ 1324.229454] ...
[ 1324.229469]   lock_acquire+0x1db/0x570
[ 1324.229478]   _raw_spin_lock+0x2f/0x40
[ 1324.229495]   flush_bg_queue+0x28c/0x570
[ 1324.234484] kobject: 'input187' (00000000435389a5): kobject_cleanup, parent           (null)
[ 1324.238096]   fuse_request_queue_background+0x360/0x640
[ 1324.238110]   fuse_request_send_background+0x58/0x120
[ 1324.238126]   cuse_channel_open+0x612/0x96a
[ 1324.249248] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1324.249940]   misc_open+0x398/0x4c0
[ 1324.249954]   chrdev_open+0x270/0x7c0
[ 1324.254945] kobject: 'input187' (00000000435389a5): calling ktype release
[ 1324.259166]   do_dentry_open+0x48a/0x1210
[ 1324.259178]   vfs_open+0xa0/0xd0
[ 1324.259191]   path_openat+0x144f/0x5650
[ 1324.259201]   do_filp_open+0x26f/0x370
[ 1324.259209]   do_sys_open+0x59a/0x7c0
[ 1324.259224]   __ia32_compat_sys_openat+0x98/0xf0
[ 1324.263387] binder: undelivered TRANSACTION_ERROR: 29201
[ 1324.267480]   do_fast_syscall_32+0x333/0xf98
[ 1324.267495]   entry_SYSENTER_compat+0x70/0x7f
[ 1324.267501] 
[ 1324.267501] other info that might help us debug this:
[ 1324.267501] 
[ 1324.275380] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1324.275672]  Possible interrupt unsafe locking scenario:
[ 1324.275672] 
[ 1324.284095] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1324.286666]        CPU0                    CPU1
[ 1324.286670]        ----                    ----
[ 1324.286672]   lock(&fiq->waitq);
[ 1324.286682]                                local_irq_disable();
[ 1324.286684]                                lock(&(&ctx->ctx_lock)->rlock);
[ 1324.294181] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1324.298079]                                lock(&fiq->waitq);
[ 1324.298087]   <Interrupt>
[ 1324.298090]     lock(&(&ctx->ctx_lock)->rlock);
[ 1324.298097] 
[ 1324.298097]  *** DEADLOCK ***
[ 1324.298097] 
[ 1324.298106] 1 lock held by syz-executor0/5513:
[ 1324.298113]  #0: 000000000c538c4b (&(&ctx->ctx_lock)->rlock){..-.}, at: aio_poll+0x790/0x14e0
[ 1324.539165] 
[ 1324.539165] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1324.548158] -> (&(&ctx->ctx_lock)->rlock){..-.} {
[ 1324.552984]    IN-SOFTIRQ-W at:
[ 1324.556256]                     lock_acquire+0x1db/0x570
[ 1324.561692]                     _raw_spin_lock_irq+0x60/0x80
[ 1324.567475]                     free_ioctx_users+0xa7/0x6e0
[ 1324.573169]                     percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0
[ 1324.580255]                     rcu_process_callbacks+0xc4a/0x1680
[ 1324.586556]                     __do_softirq+0x30b/0xb11
[ 1324.591992]                     irq_exit+0x180/0x1d0
[ 1324.597078]                     smp_apic_timer_interrupt+0x1b7/0x760
[ 1324.603555]                     apic_timer_interrupt+0xf/0x20
[ 1324.609424]                     kmem_cache_free+0xab/0x260
[ 1324.615033]                     unlink_anon_vmas+0x3ab/0xa50
[ 1324.620817]                     free_pgtables+0x1af/0x2f0
[ 1324.626344]                     exit_mmap+0x2e3/0x5d0
[ 1324.631520]                     mmput+0x240/0x640
[ 1324.636346]                     flush_old_exec+0xb6d/0x21a0
[ 1324.642037]                     load_elf_binary+0xa70/0x5580
[ 1324.647818]                     search_binary_handler+0x17f/0x570
[ 1324.654035]                     __do_execve_file.isra.0+0x14f3/0x2700
[ 1324.660600]                     __x64_sys_execve+0x8f/0xc0
[ 1324.666210]                     do_syscall_64+0x1a3/0x800
[ 1324.671731]                     entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.678548]    INITIAL USE at:
[ 1324.681724]                    lock_acquire+0x1db/0x570
[ 1324.687072]                    _raw_spin_lock_irq+0x60/0x80
[ 1324.692764]                    free_ioctx_users+0xa7/0x6e0
[ 1324.698369]                    percpu_ref_switch_to_atomic_rcu+0x50c/0x6b0
[ 1324.705374]                    rcu_process_callbacks+0xc4a/0x1680
[ 1324.711584]                    __do_softirq+0x30b/0xb11
[ 1324.716930]                    irq_exit+0x180/0x1d0
[ 1324.721927]                    smp_apic_timer_interrupt+0x1b7/0x760
[ 1324.728316]                    apic_timer_interrupt+0xf/0x20
[ 1324.734100]                    kmem_cache_free+0xab/0x260
[ 1324.739620]                    unlink_anon_vmas+0x3ab/0xa50
[ 1324.745311]                    free_pgtables+0x1af/0x2f0
[ 1324.750746]                    exit_mmap+0x2e3/0x5d0
[ 1324.755833]                    mmput+0x240/0x640
[ 1324.760570]                    flush_old_exec+0xb6d/0x21a0
[ 1324.766174]                    load_elf_binary+0xa70/0x5580
[ 1324.771878]                    search_binary_handler+0x17f/0x570
[ 1324.778004]                    __do_execve_file.isra.0+0x14f3/0x2700
[ 1324.784479]                    __x64_sys_execve+0x8f/0xc0
[ 1324.789999]                    do_syscall_64+0x1a3/0x800
[ 1324.795433]                    entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1324.802157]  }
[ 1324.803945]  ... key      at: [<ffffffff8b58d060>] __key.51948+0x0/0x40
[ 1324.810672]  ... acquired at:
[ 1324.813763]    lock_acquire+0x1db/0x570
[ 1324.817719]    _raw_spin_lock+0x2f/0x40
[ 1324.821675]    aio_poll+0x7b9/0x14e0
[ 1324.825369]    io_submit_one+0xc39/0x1050
[ 1324.829502]    __ia32_compat_sys_io_submit+0x1c5/0x5c0
[ 1324.834775]    do_fast_syscall_32+0x333/0xf98
[ 1324.839253]    entry_SYSENTER_compat+0x70/0x7f
[ 1324.843818] 
[ 1324.845422] 
[ 1324.845422] the dependencies between the lock to be acquired
[ 1324.845426]  and SOFTIRQ-irq-unsafe lock:
[ 1324.856803] -> (&fiq->waitq){+.+.} {
[ 1324.860504]    HARDIRQ-ON-W at:
[ 1324.863766]                     lock_acquire+0x1db/0x570
[ 1324.869197]                     _raw_spin_lock+0x2f/0x40
[ 1324.874634]                     flush_bg_queue+0x28c/0x570
[ 1324.880242]                     fuse_request_queue_background+0x360/0x640
[ 1324.887162]                     fuse_request_send_background+0x58/0x120
[ 1324.893900]                     cuse_channel_open+0x612/0x96a
[ 1324.899768]                     misc_open+0x398/0x4c0
[ 1324.904937]                     chrdev_open+0x270/0x7c0
[ 1324.910291]                     do_dentry_open+0x48a/0x1210
[ 1324.915983]                     vfs_open+0xa0/0xd0
[ 1324.920895]                     path_openat+0x144f/0x5650
[ 1324.926414]                     do_filp_open+0x26f/0x370
[ 1324.931847]                     do_sys_open+0x59a/0x7c0
[ 1324.937194]                     __ia32_compat_sys_openat+0x98/0xf0
[ 1324.943497]                     do_fast_syscall_32+0x333/0xf98
[ 1324.949452]                     entry_SYSENTER_compat+0x70/0x7f
[ 1324.955482]    SOFTIRQ-ON-W at:
[ 1324.958744]                     lock_acquire+0x1db/0x570
[ 1324.964175]                     _raw_spin_lock+0x2f/0x40
[ 1324.969607]                     flush_bg_queue+0x28c/0x570
[ 1324.975212]                     fuse_request_queue_background+0x360/0x640
[ 1324.982120]                     fuse_request_send_background+0x58/0x120
[ 1324.988857]                     cuse_channel_open+0x612/0x96a
[ 1324.994726]                     misc_open+0x398/0x4c0
[ 1324.999900]                     chrdev_open+0x270/0x7c0
[ 1325.005243]                     do_dentry_open+0x48a/0x1210
[ 1325.010940]                     vfs_open+0xa0/0xd0
[ 1325.015853]                     path_openat+0x144f/0x5650
[ 1325.021370]                     do_filp_open+0x26f/0x370
[ 1325.026889]                     do_sys_open+0x59a/0x7c0
[ 1325.032236]                     __ia32_compat_sys_openat+0x98/0xf0
[ 1325.038542]                     do_fast_syscall_32+0x333/0xf98
[ 1325.044500]                     entry_SYSENTER_compat+0x70/0x7f
[ 1325.050533]    INITIAL USE at:
[ 1325.053709]                    lock_acquire+0x1db/0x570
[ 1325.059055]                    _raw_spin_lock+0x2f/0x40
[ 1325.064400]                    flush_bg_queue+0x28c/0x570
[ 1325.069918]                    fuse_request_queue_background+0x360/0x640
[ 1325.076742]                    fuse_request_send_background+0x58/0x120
[ 1325.083392]                    cuse_channel_open+0x612/0x96a
[ 1325.089170]                    misc_open+0x398/0x4c0
[ 1325.094263]                    chrdev_open+0x270/0x7c0
[ 1325.099522]                    do_dentry_open+0x48a/0x1210
[ 1325.105128]                    vfs_open+0xa0/0xd0
[ 1325.109953]                    path_openat+0x144f/0x5650
[ 1325.115395]                    do_filp_open+0x26f/0x370
[ 1325.120740]                    do_sys_open+0x59a/0x7c0
[ 1325.125998]                    __ia32_compat_sys_openat+0x98/0xf0
[ 1325.132213]                    do_fast_syscall_32+0x333/0xf98
[ 1325.138078]                    entry_SYSENTER_compat+0x70/0x7f
[ 1325.144026]  }
[ 1325.145818]  ... key      at: [<ffffffff8b626d80>] __key.43073+0x0/0x40
[ 1325.152545]  ... acquired at:
[ 1325.155632]    lock_acquire+0x1db/0x570
[ 1325.159861]    _raw_spin_lock+0x2f/0x40
[ 1325.163820]    aio_poll+0x7b9/0x14e0
[ 1325.167515]    io_submit_one+0xc39/0x1050
[ 1325.171643]    __ia32_compat_sys_io_submit+0x1c5/0x5c0
[ 1325.176902]    do_fast_syscall_32+0x333/0xf98
[ 1325.181378]    entry_SYSENTER_compat+0x70/0x7f
[ 1325.185933] 
[ 1325.187540] 
[ 1325.187540] stack backtrace:
[ 1325.192018] CPU: 1 PID: 5513 Comm: syz-executor0 Not tainted 5.0.0-rc3+ #43
[ 1325.199098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1325.208434] Call Trace:
[ 1325.211008]  dump_stack+0x1db/0x2d0
[ 1325.214622]  ? dump_stack_print_info.cold+0x20/0x20
[ 1325.219625]  ? print_shortest_lock_dependencies.cold+0x176/0x1f0
[ 1325.225755]  ? vprintk_func+0x86/0x189
[ 1325.229632]  check_usage.cold+0x5e2/0x917
[ 1325.233765]  ? check_usage_forwards+0x3e0/0x3e0
[ 1325.238422]  ? __lock_acquire+0x572/0x4a30
[ 1325.242638]  ? lockdep_on+0x50/0x50
[ 1325.246254]  ? lock_pin_lock+0x3a0/0x3a0
[ 1325.250299]  ? mark_held_locks+0x100/0x100
[ 1325.254514]  ? save_trace+0x290/0x290
[ 1325.258299]  ? __handle_mm_fault+0x3fde/0x55a0
[ 1325.262869]  __lock_acquire+0x2169/0x4a30
[ 1325.267012]  ? __lock_acquire+0x2169/0x4a30
[ 1325.271318]  ? add_lock_to_list.isra.0+0x450/0x450
[ 1325.276255]  ? mark_held_locks+0x100/0x100
[ 1325.280477]  ? add_wait_queue+0x1bc/0x300
[ 1325.284613]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 1325.289700]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1325.294276]  ? trace_hardirqs_on+0xbd/0x310
[ 1325.298587]  ? fuse_dev_poll+0x244/0x350
[ 1325.302630]  ? find_held_lock+0x35/0x120
[ 1325.306676]  ? fuse_dev_poll+0x244/0x350
[ 1325.310721]  ? lock_acquire+0x1db/0x570
[ 1325.314683]  ? kasan_check_read+0x11/0x20
[ 1325.318813]  ? do_raw_spin_unlock+0xa0/0x330
[ 1325.323207]  ? do_raw_spin_trylock+0x270/0x270
[ 1325.327785]  lock_acquire+0x1db/0x570
[ 1325.331809]  ? aio_poll+0x7b9/0x14e0
[ 1325.335512]  ? lock_release+0xc40/0xc40
[ 1325.339469]  ? rwlock_bug.part.0+0x90/0x90
[ 1325.343690]  ? trace_hardirqs_on_caller+0x310/0x310
[ 1325.348693]  _raw_spin_lock+0x2f/0x40
[ 1325.352475]  ? aio_poll+0x7b9/0x14e0
[ 1325.356174]  aio_poll+0x7b9/0x14e0
[ 1325.359701]  ? request_pending.part.0+0x170/0x170
[ 1325.364527]  ? free_ioctx_users+0x6e0/0x6e0
[ 1325.368830]  ? aio_setup_rw+0x180/0x180
[ 1325.372790]  ? find_held_lock+0x35/0x120
[ 1325.376832]  ? __might_fault+0x12b/0x1e0
[ 1325.380878]  ? lock_acquire+0x1db/0x570
[ 1325.384834]  ? lock_downgrade+0x910/0x910
[ 1325.388962]  ? lock_release+0xc40/0xc40
[ 1325.392917]  ? lock_downgrade+0x910/0x910
[ 1325.397054]  ? kasan_check_read+0x11/0x20
[ 1325.401186]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1325.406450]  io_submit_one+0xc39/0x1050
[ 1325.410405]  ? io_submit_one+0xc39/0x1050
[ 1325.414540]  ? aio_poll+0x14e0/0x14e0
[ 1325.418322]  ? lock_downgrade+0x910/0x910
[ 1325.422457]  __ia32_compat_sys_io_submit+0x1c5/0x5c0
[ 1325.427542]  ? __ia32_sys_io_submit+0x5c0/0x5c0
[ 1325.432194]  ? do_fast_syscall_32+0x13b/0xf98
[ 1325.436683]  ? lockdep_hardirqs_on+0x415/0x5d0
[ 1325.441259]  ? trace_hardirqs_on+0xbd/0x310
[ 1325.445564]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1325.451088]  ? entry_SYSENTER_compat+0x70/0x7f
[ 1325.455655]  ? trace_hardirqs_off_caller+0x300/0x300
[ 1325.460739]  ? __do_page_fault+0x3f1/0xd60
[ 1325.464960]  do_fast_syscall_32+0x333/0xf98
[ 1325.469269]  ? __ia32_sys_io_submit+0x5c0/0x5c0
[ 1325.473919]  ? do_fast_syscall_32+0x333/0xf98
[ 1325.478400]  ? do_int80_syscall_32+0x880/0x880
[ 1325.482964]  ? trace_hardirqs_off+0x310/0x310
[ 1325.487441]  ? syscall_return_slowpath+0x3b0/0x5f0
[ 1325.492351]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1325.497867]  ? prepare_exit_to_usermode+0x232/0x3b0
[ 1325.502870]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1325.507699]  entry_SYSENTER_compat+0x70/0x7f
[ 1325.512283] RIP: 0023:0xf7f68869
[ 1325.515636] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90
[ 1325.534516] RSP: 002b:00000000f5d640cc EFLAGS: 00000296 ORIG_RAX: 00000000000000f8
[ 1325.542205] RAX: ffffffffffffffda RBX: 00000000f5d3f000 RCX: 0000000000000001
[ 1325.549467] RDX: 0000000020000600 RSI: 0000000000000000 RDI: 0000000000000000
[ 1325.556718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1325.563968] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[ 1325.571224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1325.593479] binder: BC_ACQUIRE_RESULT not supported
[ 1325.595108] kobject: 'input187': free name
[ 1325.598573] binder: 5519:5524 ioctl c0306201 20000040 returned -22
19:42:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015900000072d907000f510007140028", 0x22)

19:42:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a8000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1325.619294] binder: 5515:5516 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1325.628312] binder: 5515:5516 ioctl c0306201 20000040 returned -14
[ 1325.638157] binder: undelivered TRANSACTION_ERROR: 29201
[ 1325.642542] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
19:42:23 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={<r2=>0x0, 0x7}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r2, 0x2}, 0x8)

19:42:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x2000, 0x0, 0x0})

19:42:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1325.673648] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1325.709298] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
19:42:23 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000a9000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:23 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005a00000072d907000f510007140028", 0x22)

[ 1325.717716] binder: 5535:5537 IncRefs 0 refcount change on invalid ref 1077961472 ret -22
[ 1325.720661] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1325.738713] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1325.745429] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1325.758276] input input188: cannot allocate more than FF_MAX_EFFECTS effects
[ 1325.759538] binder: 5535:5537 unknown command 0
[ 1325.777024] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
[ 1325.784336] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1325.786060] kobject: 'input188' (0000000050bbd59a): kobject_cleanup, parent           (null)
[ 1325.797690] binder: 5535:5537 ioctl c0306201 20000040 returned -22
[ 1325.802678] binder: 5536:5538 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1325.809491] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1325.824002] binder: 5536:5538 ioctl c0306201 20000040 returned -14
[ 1325.829697] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1325.831417] kobject: 'input188' (0000000050bbd59a): calling ktype release
[ 1325.847299] kobject: 'input188': free name
[ 1325.852305] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1325.856749] binder: undelivered TRANSACTION_ERROR: 29201
[ 1325.866914] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1325.877308] input input189: cannot allocate more than FF_MAX_EFFECTS effects
[ 1325.885324] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1325.890909] kobject: 'input189' (000000009ee059f6): kobject_cleanup, parent           (null)
[ 1325.895282] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1325.910963] kobject: 'input189' (000000009ee059f6): calling ktype release
[ 1325.914391] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1325.917925] kobject: 'input189': free name
[ 1325.924689] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1325.944154] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1325.951274] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1325.965417] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1325.972384] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015a00000072d907000f510007140028", 0x22)

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001a9000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0763044000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x3f00, 0x0, 0x0})

19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250e0000005c00030008000300030000001400020064756d6d793000000000000000000000080007004e2300000800030004000000080004001f00000008000500ac1414aa080007004e2400001400060000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:24 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

[ 1326.051426] binder: 5563:5566 DecRefs 0 refcount change on invalid ref 1077961472 ret -22
[ 1326.057089] input input190: cannot allocate more than FF_MAX_EFFECTS effects
[ 1326.067864] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1326.071955] binder: 5563:5566 unknown command 0
[ 1326.076603] binder: 5565:5573 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1326.086474] binder: 5563:5566 ioctl c0306201 20000040 returned -22
19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0363084000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000aa000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.091039] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1326.111664] kobject: 'input190' (000000006ca19a40): kobject_cleanup, parent           (null)
[ 1326.127056] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1326.140120] binder: 5565:5573 ioctl c0306201 20000040 returned -14
19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005b00000072d907000f510007140028", 0x22)

19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250e0000005c00030008000300030000001400020064756d6d793000000000000000000000080007004e2300000800030004000000080004001f00000008000500ac1414aa080007004e2400001400060000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 1326.147385] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1326.152128] binder: 5579:5581 BC_FREE_BUFFER u0000000040406300 no match
[ 1326.164892] kobject: 'input190' (000000006ca19a40): calling ktype release
[ 1326.185342] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1326.194072] kobject: 'input190': free name
19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001aa000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.198749] binder: undelivered TRANSACTION_ERROR: 29201
[ 1326.208239] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1326.216300] binder: 5579:5581 unknown command 0
[ 1326.218765] uinput: write device info first
[ 1326.234556] kobject: 'input191' (00000000754387b4): kobject_cleanup, parent           (null)
[ 1326.244562] binder: 5579:5581 ioctl c0306201 20000040 returned -22
19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4000, 0x0, 0x0})

19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015b00000072d907000f510007140028", 0x22)

[ 1326.251766] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1326.262432] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1326.276573] kobject: 'input191' (00000000754387b4): calling ktype release
[ 1326.285335] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1326.285805] binder: 5593:5594 ioctl c0306201 20000040 returned -14
19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000ab000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\nc\b@\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:24 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400000, 0x0)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x5, 0x4)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x10000, 0x20000)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4)
r3 = accept4$tipc(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000)
setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

[ 1326.295174] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1326.319954] kobject: 'input191': free name
[ 1326.321812] binder: 5593:5594 ioctl c0306201 20000040 returned -14
[ 1326.329201] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250e0000005c00030008000300030000001400020064756d6d793000000000000000000000080007004e2300000800030004000000080004001f00000008000500ac1414aa080007004e2400001400060000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005c00000072d907000f510007140028", 0x22)

[ 1326.349126] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1326.362394] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1326.371066] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1326.385156] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1326.386031] input input192: cannot allocate more than FF_MAX_EFFECTS effects
19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001ab000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4800, 0x0, 0x0})

[ 1326.394731] binder: 5600:5601 ioctl c0306201 20000040 returned -22
[ 1326.418012] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1063084000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015c00000072d907000f510007140028", 0x22)

[ 1326.443346] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1326.463058] binder: 5613:5614 ioctl c0306201 20000040 returned -14
[ 1326.472969] kobject: 'input192' (000000006e58f513): kobject_cleanup, parent           (null)
[ 1326.472988] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000ac000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84010000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70020000", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250e0000005c00030008000300030000001400020064756d6d793000000000000000000000080007004e2300000800030004000000080004001f00000008000500ac1414aa080007004e2400001400060000000000000000000000000000000001"], 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x40000)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 1326.487661] binder: 5613:5614 ioctl c0306201 20000040 returned -14
[ 1326.496398] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1326.514227] binder: 5615:5616 BC_DEAD_BINDER_DONE 0000000040406300 not found
[ 1326.516419] kobject: 'input192' (000000006e58f513): calling ktype release
[ 1326.522972] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
[ 1326.537970] binder: 5615:5616 unknown command 0
19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4c00, 0x0, 0x0})

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001ac000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.544242] kobject: 'input192': free name
[ 1326.551111] binder: 5615:5616 ioctl c0306201 20000040 returned -22
[ 1326.558766] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1326.573352] kobject: 'input193' (00000000ab0e9ee7): kobject_cleanup, parent           (null)
[ 1326.584536] kobject: 'input193' (00000000ab0e9ee7): calling ktype release
19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005d00000072d907000f510007140028", 0x22)

[ 1326.602416] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1326.608864] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1326.618027] binder: 5629:5630 ioctl c0306201 20000040 returned -14
[ 1326.625414] kobject: 'input193': free name
[ 1326.640166] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1326.646600] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
19:42:24 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x5cf)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7fff, 0x703083)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x310, 0x100070bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffffffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80000001}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f5fb46}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040050)
sendmsg$nl_crypto(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@del={0x108, 0x11, 0x2, 0x70bd26, 0x25dfdbff, {{'drbg_nopr_sha512\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x6}, {0x8, 0x1, 0x3}, {0x8}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x4880}, 0x40080)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c4000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000ad000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6000, 0x0, 0x0})

19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00')
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 1326.679336] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1326.686694] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1326.697764] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015d00000072d907000f510007140028", 0x22)

[ 1326.722188] binder: 5634:5638 ioctl c0306201 20000040 returned -14
[ 1326.727584] input input194: cannot allocate more than FF_MAX_EFFECTS effects
[ 1326.736287] binder: 5639:5640 BC_REQUEST_DEATH_NOTIFICATION invalid ref 1077961472
[ 1326.736385] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1326.747037] binder: 5639:5640 unknown command 0
[ 1326.761344] kobject: 'input194' (00000000c4da5d15): kobject_cleanup, parent           (null)
19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001ad000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.771107] binder: 5634:5638 ioctl c0306201 20000040 returned -14
[ 1326.772771] binder: 5639:5640 ioctl c0306201 20000040 returned -22
[ 1326.779101] input input195: cannot allocate more than FF_MAX_EFFECTS effects
[ 1326.796036] kobject: 'input194' (00000000c4da5d15): calling ktype release
[ 1326.797284] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1326.813331] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005e00000072d907000f510007140028", 0x22)

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000ae000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.824371] kobject: 'input194': free name
19:42:24 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
dup3(r2, r1, 0x80000)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6800, 0x0, 0x0})

[ 1326.848779] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1326.851983] kobject: 'input195' (00000000102a00c3): kobject_cleanup, parent           (null)
[ 1326.855271] kobject: 'input196' (00000000c6e40c01): kobject_cleanup, parent           (null)
[ 1326.882637] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
19:42:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f630c4000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1326.904953] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1326.908995] kobject: 'input195' (00000000102a00c3): calling ktype release
[ 1326.926552] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1326.928469] kobject: 'input195': free name
[ 1326.942014] binder: 5660:5661 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1077961472
19:42:24 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:24 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015e00000072d907000f510007140028", 0x22)

19:42:24 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001ae000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1326.944374] binder: 5662:5663 ioctl c0306201 20000040 returned -14
[ 1326.951347] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1326.968241] binder: 5660:5661 unknown command 0
[ 1326.974302] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1326.985431] binder: 5660:5661 ioctl c0306201 20000040 returned -22
19:42:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6c00, 0x0, 0x0})

19:42:25 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000af000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1327.004611] kobject: 'input196' (00000000c6e40c01): calling ktype release
[ 1327.013226] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1327.022206] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.043982] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000005f00000072d907000f510007140028", 0x22)

19:42:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0863104000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001af000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1327.054587] kobject: 'input196': free name
[ 1327.057190] binder: 5674:5676 ioctl c0306201 20000040 returned -14
[ 1327.065778] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
19:42:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x7400, 0x0, 0x0})

19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000015f00000072d907000f510007140028", 0x22)

[ 1327.098461] input input197: cannot allocate more than FF_MAX_EFFECTS effects
[ 1327.110706] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1327.131441] binder: 5685:5686 BC_INCREFS_DONE u0000000040406300 no match
[ 1327.136264] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
19:42:25 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 1327.153841] kobject: 'input197' (000000000cd077da): kobject_cleanup, parent           (null)
[ 1327.161870] binder: 5685:5686 unknown command 0
[ 1327.167729] binder: 5684:5688 ioctl c0306201 20000040 returned -14
[ 1327.176311] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1327.186481] kobject: 'input197' (000000000cd077da): calling ktype release
[ 1327.188387] binder: 5685:5686 ioctl c0306201 20000040 returned -22
[ 1327.195444] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1327.211947] kobject: 'input197': free name
[ 1327.216751] binder: 5684:5688 ioctl c0306201 20000040 returned -14
[ 1327.225286] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
[ 1327.234231] kobject: 'input198' (00000000102e3cbc): kobject_cleanup, parent           (null)
[ 1327.244022] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1327.249041] uinput: write device info first
[ 1327.258545] kobject: 'input198' (00000000102e3cbc): calling ktype release
[ 1327.266119] kobject: 'input198': free name
[ 1327.269391] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1327.270728] kobject: 'input199' (000000007cc810ad): kobject_cleanup, parent           (null)
[ 1327.276760] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1327.277095] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
19:42:25 executing program 2:
clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b0000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006000000072d907000f510007140028", 0x22)

19:42:25 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0963104000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x7a00, 0x0, 0x0})

[ 1327.285621] kobject: 'input199' (000000007cc810ad): calling ktype release
[ 1327.299406] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.304719] kobject: 'input199': free name
[ 1327.308561] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1327.328425] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1327.352347] binder: 5697:5701 BC_ACQUIRE_DONE u0000000040406300 no match
[ 1327.360975] __nla_parse: 55 callbacks suppressed
[ 1327.360984] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.361227] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1327.368580] binder_alloc_new_buf_locked: 12 callbacks suppressed
[ 1327.368588] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1327.375447] binder: 5697:5701 unknown command 0
19:42:25 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

[ 1327.383382] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1327.386994] binder: 5697:5701 ioctl c0306201 20000040 returned -22
[ 1327.411878] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.416044] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.435107] input input200: cannot allocate more than FF_MAX_EFFECTS effects
[ 1327.438545] binder_alloc_new_buf_locked: 12 callbacks suppressed
19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b0000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016000000072d907000f510007140028", 0x22)

[ 1327.438559] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1327.444553] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1327.464465] kobject: 'input200' (000000004f2c58fa): kobject_cleanup, parent           (null)
[ 1327.466479] binder: 5698:5699 ioctl c0306201 20000040 returned -14
[ 1327.473193] kobject: 'input200' (000000004f2c58fa): calling ktype release
[ 1327.473213] kobject: 'input200': free name
19:42:25 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
io_setup(0x7fffffff, &(0x7f00000002c0)=<r3=>0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_submit(r3, 0x5, &(0x7f0000000800)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x5, r1, &(0x7f0000000300)="bc41f2efe1eab8491dcfdd14d34f378bac98e26c2c1d852fa924f70e8dd27ee5dceaf9bbf9390598b65056277d4510824a564756ef60739ed8c90f64826b8ce166af966c08aba2a91f3ee1357dd39336d886fd11c2be7b2d537a4ae5e6580a212d73da918efa41486e88f710e5f76ec9bdbdfa41f6ef7e3d7b13d9152e941fe8547d4f1dc1fe9ee47157a763bf1f85eda28a9edb5236dc7e087676d2a54c1d60faf294a5b2bbc9b6d9aafef160c7c2080b66bb6b20152004299f2e92545eb3153e", 0xc1, 0x6, 0x0, 0x2, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x0, r2, &(0x7f0000000440)="e991", 0x2, 0xffffffffffff7fff, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x2, r1, &(0x7f00000004c0)="0aca9a2e56297c31b370d59c029ec4a16ffa342320bd68df5b61769bc91ac73dad88a5d90e3e108e472c0c2c028ae3f49e982e73124122e77802b910e54982a824c23df23ba55690fdfe638b63ece01a154a1a2ccc6dc36bf06fc7103f931ca0751c8f323c9261cd5100ee96ad1a3bcb1b32df35806bc689", 0x78, 0x3, 0x0, 0x1, r0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000640)="e444636e9e76d3ec3c991cc70a6d2bbee62fb00045fa42689d84dbbd8f52806d809ef3e575576eb21aba5a976dfcc5ed7003b66666374b2653543dbea6ea6b663628250e3e35a5ef807ad95d10275297aa1cfdaa2652d294460ad897544f5b9f8f0f85e0cb1174ba9dc571f8bca4ae0abe65ca1f2555e2a5d64bc5f1df305144bfaf3f722c1343941f980e1770097617233758f295b270dc0704cc5ec778483d857126", 0xa3, 0x1000, 0x0, 0x1, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x401, r4, &(0x7f0000000700)="f71b397caadcc07d4724a68b59a80d919de57b512cacb0baff217dd5ea93eb6d470fe19958fe98d103d937c0fac456d7440d3e446f4a42d5812dd9075aaf999c42fb5b81b0cb2bb735bd376441bd0e72d321e25fcda248b3341219ce68056d9135c2cdd69e760ad8cf5111fc9ad4193dca5cb078d4482d3428fbf60635de8bae764b2fbaef111238ff9cd9eaa4b13cfe236cc9c5d8d4f8287ad126f17c1b", 0x9e, 0x3ef, 0x0, 0x1, r0}])
io_setup(0x100, &(0x7f0000000100)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

19:42:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00c@@\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1327.503974] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1327.520938] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1327.530532] kobject: 'input201' (000000008230c521): kobject_cleanup, parent           (null)
[ 1327.530555] uinput: write device info first
19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006100000072d907000f510007140028", 0x22)

[ 1327.549280] kobject: 'input201' (000000008230c521): calling ktype release
[ 1327.549356] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.565040] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1327.572657] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1327.582932] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1327.589444] binder: 5719:5720 got transaction to invalid handle
[ 1327.592491] kobject: 'input201': free name
[ 1327.596230] binder: 5719:5720 got transaction to invalid handle
[ 1327.606014] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1327.609583] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1327.630723] kobject: 'input202' (00000000865fcf0f): kobject_cleanup, parent           (null)
[ 1327.631918] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1327.654529] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.666140] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
[ 1327.671553] kobject: 'input202' (00000000865fcf0f): calling ktype release
[ 1327.676427] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1327.687165] kobject: 'input202': free name
[ 1327.692943] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
19:42:25 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
socket$tipc(0x1e, 0x2, 0x0)

19:42:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x1000000, 0x0, 0x0})

19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b1000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0163404000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:25 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
io_setup(0x7fffffff, &(0x7f00000002c0))
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016100000072d907000f510007140028", 0x22)

[ 1327.705726] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1327.715683] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1327.738100] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1327.740143] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.751427] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.755376] binder: 5724:5731 got reply transaction with no transaction stack
[ 1327.764895] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1327.779578] binder_transaction: 14 callbacks suppressed
[ 1327.779593] binder: 5724:5731 transaction failed 29201/-71, size 0-0 line 2801
[ 1327.781433] netlink: 6 bytes leftover after parsing attributes in process `syz-executor4'.
19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b1000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1327.801064] binder_release_work: 14 callbacks suppressed
[ 1327.801074] binder: undelivered TRANSACTION_ERROR: 29201
[ 1327.807503] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1327.824637] binder: 5725:5733 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1327.833209] input input203: cannot allocate more than FF_MAX_EFFECTS effects
[ 1327.833620] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1327.840654] binder: 5725:5733 ioctl c0306201 20000040 returned -14
19:42:25 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
io_setup(0x7fffffff, &(0x7f00000002c0))
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1327.852824] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1327.857600] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.863475] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1327.888435] kobject: 'input203' (0000000027d754bd): kobject_cleanup, parent           (null)
[ 1327.895961] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
19:42:25 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006200000072d907000f510007140028", 0x22)

[ 1327.906369] binder: 5741:5742 got transaction to invalid handle
[ 1327.909306] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1327.915064] binder: 5741:5742 transaction failed 29201/-22, size 0-0 line 2896
[ 1327.928569] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
[ 1327.929932] kobject: 'input203' (0000000027d754bd): calling ktype release
[ 1327.943721] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1327.953366] kobject: 'input203': free name
19:42:25 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b2000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1327.958039] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1327.958155] binder: undelivered TRANSACTION_ERROR: 29201
[ 1327.976820] netlink: 6 bytes leftover after parsing attributes in process `syz-executor5'.
[ 1327.982485] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1327.991957] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1263484000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1327.992976] kobject: 'input204' (00000000384336e0): kobject_cleanup, parent           (null)
[ 1328.018619] binder: undelivered TRANSACTION_ERROR: 29201
[ 1328.031690] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1328.041565] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1328.048418] binder: 5725:5733 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1328.053026] uinput: write device info first
[ 1328.061310] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1328.063990] binder: 5753:5754 got reply transaction with no transaction stack
[ 1328.073522] kobject: 'input204' (00000000384336e0): calling ktype release
[ 1328.078155] binder: 5725:5733 ioctl c0306201 20000040 returned -14
[ 1328.085786] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1328.091524] binder: 5753:5754 transaction failed 29201/-71, size 0-0 line 2801
19:42:26 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xd4104c05e9cbfd64, 0x0)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080))
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x2000000, 0x0, 0x0})

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
io_setup(0x7fffffff, &(0x7f00000002c0))
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016200000072d907000f510007140028", 0x22)

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b2000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63120000634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1328.100301] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1328.105481] binder: undelivered TRANSACTION_ERROR: 29201
[ 1328.115587] kobject: 'input204': free name
[ 1328.126488] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1328.133058] binder: undelivered TRANSACTION_ERROR: 29201
[ 1328.136766] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006300000072d907000f510007140028", 0x22)

[ 1328.171875] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1328.173602] input input206: cannot allocate more than FF_MAX_EFFECTS effects
[ 1328.179739] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1328.206652] binder: 5766:5767 unknown command 1205004
[ 1328.209204] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b3000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1328.216959] binder: 5766:5767 ioctl c0306201 20000040 returned -22
[ 1328.218427] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1328.225463] kobject: 'input206' (000000004f59b51e): kobject_cleanup, parent           (null)
[ 1328.237032] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1328.256566] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63001200634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
io_setup(0x7fffffff, &(0x7f00000002c0))
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b3000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016300000072d907000f510007140028", 0x22)

[ 1328.263597] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1328.275562] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1328.285554] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1328.295222] binder: 5755:5769 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1328.305548] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1328.321860] binder: 5774:5775 unknown command 302015244
[ 1328.325864] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1328.333814] kobject: 'input206' (000000004f59b51e): calling ktype release
[ 1328.334466] binder: 5755:5769 ioctl c0306201 20000040 returned -14
[ 1328.350399] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1328.355738] binder: 5774:5775 ioctl c0306201 20000040 returned -22
[ 1328.363506] binder: undelivered TRANSACTION_ERROR: 29201
19:42:26 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x200000802, 0x0)
r1 = fcntl$dupfd(r0, 0x406, r0)
restart_syscall()
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/9, 0x9)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3018, @rand_addr="78454ae38ca5b483b75e2bd5dcfdcfb2", 0x9}, {0xa, 0x4e23, 0x9, @empty, 0x2df2000000000}, r2, 0x81}}, 0x48)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000000)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0xc}}, 0x18)

[ 1328.371018] kobject: 'input206': free name
[ 1328.380858] binder: 5774:5775 unknown command 302015244
[ 1328.386004] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1328.390712] binder: 5774:5775 ioctl c0306201 20000040 returned -22
[ 1328.408778] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
19:42:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x3000000, 0x0, 0x0})

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b4000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006400000072d907000f510007140028", 0x22)

19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63001200634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1328.415355] input input208: cannot allocate more than FF_MAX_EFFECTS effects
[ 1328.423754] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1328.448451] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1328.457594] kobject: 'input208' (000000006eeeaa2a): kobject_cleanup, parent           (null)
[ 1328.458366] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1328.478129] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1328.479169] binder: 5795:5797 unknown command 302015244
[ 1328.503450] kobject: 'input208' (000000006eeeaa2a): calling ktype release
[ 1328.503886] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1328.513638] binder: 5795:5797 ioctl c0306201 20000040 returned -22
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016400000072d907000f510007140028", 0x22)

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b4000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 2:
clone(0x100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={<r2=>0xffffffffffffffff}, 0x13f, 0x7}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
write$uinput_user_dev(r1, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x1, 0xffffffffffffffff, 0x4, 0x3, 0x8, 0x536, 0x0, 0x3}})
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1328.520431] binder: 5791:5792 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1328.525236] kobject: 'input208': free name
[ 1328.541877] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1328.559166] binder: 5791:5792 ioctl c0306201 20000040 returned -14
[ 1328.563143] kobject: 'loop3' (00000000dd4ae97b): kobject_uevent_env
19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000012634040000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b5000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1328.592654] kobject: 'loop3' (00000000dd4ae97b): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1328.605983] input input209: cannot allocate more than FF_MAX_EFFECTS effects
[ 1328.616954] binder: 5809:5811 unknown command 1077961490
[ 1328.622779] kobject: 'input209' (00000000b63ab408): kobject_cleanup, parent           (null)
[ 1328.626823] binder: 5809:5811 ioctl c0306201 20000040 returned -22
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006500000072d907000f510007140028", 0x22)

19:42:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x4000000, 0x0, 0x0})

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b5000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\vc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1328.636105] binder: undelivered TRANSACTION_ERROR: 29201
[ 1328.645439] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1328.664129] kobject: 'input209' (00000000b63ab408): calling ktype release
[ 1328.664377] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1328.680402] kobject: 'input209': free name
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016500000072d907000f510007140028", 0x22)

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1328.703665] binder: 5817:5818 ERROR: BC_REGISTER_LOOPER called after BC_ENTER_LOOPER
[ 1328.723180] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1328.733404] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1328.737064] binder: 5817:5818 unknown command 0
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000586500000072d907000f510007140028", 0x22)

[ 1328.745291] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1328.751154] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1328.755094] binder: 5817:5818 ioctl c0306201 20000040 returned -22
[ 1328.764337] kobject: 'input210' (00000000ddaf6855): kobject_cleanup, parent           (null)
[ 1328.771255] binder: 5822:5823 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1328.788251] binder: 5822:5823 ioctl c0306201 20000040 returned -14
[ 1328.794860] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
19:42:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\fc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

[ 1328.806457] kobject: 'input210' (00000000ddaf6855): calling ktype release
[ 1328.814703] binder: undelivered TRANSACTION_ERROR: 29201
[ 1328.815272] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1328.838077] kobject: 'input210': free name
[ 1328.843288] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
19:42:26 executing program 2:
clone(0x40910000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b6000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x5000000, 0x0, 0x0})

19:42:26 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1328.852294] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b6000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1328.883568] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1328.890111] binder: 5832:5833 unknown command 0
[ 1328.895029] binder: 5832:5833 ioctl c0306201 20000040 returned -22
[ 1328.906623] input input211: cannot allocate more than FF_MAX_EFFECTS effects
[ 1328.911494] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1328.920870] kobject: 'input211' (0000000014c21c1a): kobject_cleanup, parent           (null)
19:42:26 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006600000072d907000f510007140028", 0x22)

19:42:26 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b7000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1328.925417] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1328.938666] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1328.943505] kobject: 'input211' (0000000014c21c1a): calling ktype release
[ 1328.951811] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1328.960851] kobject: 'input211': free name
[ 1328.973643] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\rc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:27 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
close(0xffffffffffffffff)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

[ 1328.983655] kobject: 'input212' (00000000a18b6703): kobject_cleanup, parent           (null)
[ 1328.984992] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1329.001620] binder: 5841:5842 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1329.010703] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1329.028803] binder: 5849:5852 unknown command 0
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016600000072d907000f510007140028", 0x22)

19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b7000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1329.034072] uinput: write device info first
[ 1329.034551] binder: 5841:5842 ioctl c0306201 20000040 returned -14
[ 1329.043023] kobject: 'input212' (00000000a18b6703): calling ktype release
[ 1329.048184] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1329.060124] binder: 5849:5852 ioctl c0306201 20000040 returned -22
[ 1329.064409] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000002630440000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1329.087027] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1329.090884] kobject: 'input212': free name
[ 1329.099269] binder: undelivered TRANSACTION_ERROR: 29201
[ 1329.105596] kobject: 'input213' (000000009d189218): kobject_cleanup, parent           (null)
[ 1329.125513] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
19:42:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x6000000, 0x0, 0x0})

19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006700000072d907000f510007140028", 0x22)

19:42:27 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
close(0xffffffffffffffff)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

19:42:27 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)={0x1, 0x0, @ioapic={0x1000, 0x8, 0x0, 0x6, 0x0, [{0x7fff, 0x2, 0x3d93986a, [], 0x4}, {0x1, 0x5b, 0x6c, [], 0x200}, {0x988d, 0x80000001, 0x2d3f8332, [], 0x1}, {0xe34704c, 0x7, 0x795b, [], 0x29}, {0x1, 0x6, 0x2210be3d, [], 0x3}, {0x40c6, 0x4, 0x80}, {0x5, 0x7, 0x5, [], 0x72}, {0x4, 0x9, 0x10000, [], 0x3f}, {0x10, 0x0, 0x0, [], 0x8}, {0x401, 0x4, 0x2, [], 0x3ff}, {0xfffffffffffffffd, 0x2, 0x1ff}, {0x47a, 0x1ff, 0xff, [], 0x8}, {0x1, 0x7, 0x5}, {0x7, 0xfff, 0x100, [], 0x1}, {0x7fff, 0x7, 0x0, [], 0x6}, {0xf6, 0x3, 0x8, [], 0x80}, {0x56, 0x3, 0x9d, [], 0x10001}, {0xb780, 0x132, 0xffffffffffffffc1, [], 0x10000}, {0x6, 0x0, 0x1f, [], 0x2}, {0x6, 0xe72, 0x6, [], 0x1}, {0x5, 0x4, 0x8, [], 0x8}, {0x1, 0x3, 0x78, [], 0x8000}, {0x3, 0x100010000, 0x1, [], 0x1f}, {0xfffffffffffffffb, 0x3, 0x80, [], 0x40}]}})
socket$nl_route(0x10, 0x3, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {}, 0xffffffffffffffff}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101840, 0x0)
ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x3, 0x3})
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240))

[ 1329.144666] kobject: 'input213' (000000009d189218): calling ktype release
[ 1329.146260] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1329.153571] kobject: 'input213': free name
[ 1329.158547] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1329.174423] binder: BC_ACQUIRE_RESULT not supported
19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b8000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016700000072d907000f510007140028", 0x22)

[ 1329.195897] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1329.198983] binder: 5861:5862 ioctl c0306201 20000040 returned -22
[ 1329.213900] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1329.223000] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1329.232948] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006800000072d907000f510007140028", 0x22)

[ 1329.243051] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
[ 1329.252327] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1329.262558] input input214: cannot allocate more than FF_MAX_EFFECTS effects
[ 1329.268626] binder: 5865:5866 transaction failed 29201/-28, size 0-549755813888 line 3035
[ 1329.272251] kobject: 'input214' (0000000000956385): kobject_cleanup, parent           (null)
[ 1329.288010] binder: 5865:5866 ioctl c0306201 20000040 returned -14
19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b8000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 0:
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x2100)
close(0xffffffffffffffff)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}])

19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000004630440000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1329.294442] kobject: 'input214' (0000000000956385): calling ktype release
[ 1329.303599] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1329.314050] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1329.317926] kobject: 'input214': free name
[ 1329.337981] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016800000072d907000f510007140028", 0x22)

19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000b9000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x7000000, 0x0, 0x0})

[ 1329.341659] binder: undelivered TRANSACTION_ERROR: 29201
[ 1329.359129] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1329.378390] uinput: write device info first
[ 1329.380770] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1329.386671] kobject: 'input215' (000000004aeb5bb5): kobject_cleanup, parent           (null)
[ 1329.398236] kobject: 'input215' (000000004aeb5bb5): calling ktype release
[ 1329.399234] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1329.407886] kobject: 'input215': free name
19:42:27 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f0000000000)={0x3ff, 0xc429, 0x0, 0xfff, 0x1, 0x0, 0x101, 0x6}, &(0x7f0000000040)={0x6, 0x10, 0x6, 0xffffffffffffffff, 0x7, 0xa51, 0x3, 0x839d}, &(0x7f0000000080)={0x0, 0x9a65, 0x6, 0x6, 0x401, 0x9, 0xfffffffffffffffd, 0x81}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={0x5}, 0x8})
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/124)

19:42:27 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1329.446673] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
[ 1329.464980] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1329.475852] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1329.484940] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1329.506873] uinput: write device info first
[ 1329.515460] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1329.526731] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1329.537868] uinput: write device info first
[ 1329.542259] binder: 5902:5903 unknown command 0
[ 1329.542273] binder: 5902:5903 ioctl c0306201 20000040 returned -22
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006900000072d907000f510007140028", 0x22)

19:42:27 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100030100ff3ffe58", 0x1f}], 0x1)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x0, 0x0, 0x5, 0x7}, 'syz0\x00', 0x13})
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0)
getdents(r0, &(0x7f0000000140)=""/209, 0xd1)
recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=""/229, 0xe5}, {&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/175, 0xaf}, {&(0x7f0000000640)=""/242, 0xf2}, {&(0x7f0000000740)=""/53, 0x35}], 0x6, &(0x7f00000007c0)=""/30, 0x1e}, 0xff}, {{&(0x7f0000000800)=@nl=@proc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/136, 0x88}, {&(0x7f0000000940)=""/157, 0x9d}, {&(0x7f0000000a00)=""/50, 0x32}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/54, 0x36}, {&(0x7f0000000ac0)=""/126, 0x7e}, {&(0x7f0000000b40)=""/106, 0x6a}, {&(0x7f0000000bc0)=""/110, 0x6e}, {&(0x7f0000000c40)=""/250, 0xfa}, {&(0x7f0000000d40)=""/193, 0xc1}], 0xa, &(0x7f0000000ec0)=""/252, 0xfc}, 0x10000}, {{&(0x7f0000000fc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001040)=""/101, 0x65}, {&(0x7f00000010c0)=""/229, 0xe5}], 0x2, &(0x7f0000001200)=""/137, 0x89}, 0x1}, {{&(0x7f00000012c0)=@can={0x1d, <r3=>0x0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001340)=""/238, 0xee}, {&(0x7f0000001440)=""/28, 0x1c}, {&(0x7f0000001480)=""/231, 0xe7}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/121, 0x79}, {&(0x7f0000001700)=""/245, 0xf5}], 0x6, &(0x7f0000001840)=""/96, 0x60}, 0x100000000}, {{&(0x7f00000018c0)=@x25, 0x80, &(0x7f0000002f80)=[{&(0x7f0000001940)=""/201, 0xc9}, {&(0x7f0000001a40)=""/96, 0x60}, {&(0x7f0000001ac0)=""/209, 0xd1}, {&(0x7f0000001bc0)=""/12, 0xc}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/202, 0xca}, {&(0x7f0000002d00)=""/39, 0x27}, {&(0x7f0000002d40)=""/207, 0xcf}, {&(0x7f0000002e40)=""/185, 0xb9}, {&(0x7f0000002f00)=""/113, 0x71}], 0xa, &(0x7f0000003000)=""/67, 0x43}, 0x2c}, {{&(0x7f0000003080)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/114, 0x72}, {&(0x7f0000004180)=""/187, 0xbb}, {&(0x7f0000004240)=""/172, 0xac}, {&(0x7f0000004300)=""/79, 0x4f}, {&(0x7f0000004380)=""/154, 0x9a}, {&(0x7f0000004440)=""/218, 0xda}], 0x7, &(0x7f0000004580)=""/225, 0xe1}, 0xa5b}], 0x6, 0x10000, &(0x7f0000004740)={0x77359400})
stat(&(0x7f0000004780)='./file0\x00', &(0x7f00000047c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004840)={{{@in=@remote, @in6=@dev={0xfe, 0x80, [], 0x13}, 0x4e23, 0x1f, 0x4e23, 0x800, 0xa, 0xa0, 0xa0, 0xff, r3, r4}, {0x1, 0x9, 0x7, 0x80, 0xffff, 0x9, 0x4, 0x101}, {0x4, 0xf2, 0x0, 0x7}, 0x3f, 0x6e6bbb, 0x2, 0x1, 0x0, 0x3}, {{@in6=@rand_addr="9547b3cd6c0682a61ec6cbd596cb364d", 0x4d3, 0xff}, 0x2, @in=@remote, 0x3501, 0x4, 0x0, 0x7fffffff, 0xb54, 0x7, 0x3f}}, 0xe8)

19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001b9000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000007630440000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

[ 1329.553851] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1329.569370] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1329.575548] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1329.592327] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016900000072d907000f510007140028", 0x22)

19:42:27 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1329.616098] binder: 5897:5898 ioctl c0306201 20000040 returned -14
[ 1329.621373] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1329.630291] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1329.643334] uinput: write device info first
[ 1329.648607] binder: 5909:5912 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 1329.657692] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
19:42:27 executing program 2:
r0 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
fstat(r0, &(0x7f00000001c0))
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x1)
clone(0x2010100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
r2 = gettid()
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000080), 0x4)
ptrace$poke(0x4, r2, &(0x7f0000000000), 0xfffffffffffffff7)
write$uinput_user_dev(r1, &(0x7f0000000880)={'syz1\x00', {}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0xfffffffffffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

19:42:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x12000000, 0x0, 0x0})

19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000ba000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006a00000072d907000f510007140028", 0x22)

[ 1329.675903] kobject: 'loop2' (00000000e149c2d3): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1329.685461] binder: 5909:5912 unknown command 0
[ 1329.685476] binder: 5909:5912 ioctl c0306201 20000040 returned -22
[ 1329.685961] binder: 5909:5912 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 1329.718799] input input219: cannot allocate more than FF_MAX_EFFECTS effects
[ 1329.732187] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1329.735180] kobject: 'input219' (000000005a0182de): kobject_cleanup, parent           (null)
[ 1329.746999] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1329.748473] binder_alloc: 10471: binder_alloc_buf size 549755813888 failed, no address space
[ 1329.765863] binder: 5909:5912 unknown command 0
[ 1329.767108] kobject: 'loop1' (000000004f61db91): kobject_uevent_env
19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000001ba000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c63000003630840000000000000000000000000000000000000000009"], 0x0, 0x0, 0x0})

19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016a00000072d907000f510007140028", 0x22)

19:42:27 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x2, 0x0)
io_setup(0x100, &(0x7f0000000100)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

[ 1329.776583] binder: 5909:5912 ioctl c0306201 20000040 returned -22
[ 1329.779144] binder_alloc: allocated: 1240 (num: 134 largest: 32), free: 11048 (num: 1 largest: 11048)
[ 1329.792808] kobject: 'input219' (000000005a0182de): calling ktype release
[ 1329.802991] kobject: 'loop1' (000000004f61db91): fill_kobj_path: path = '/devices/virtual/block/loop1'
[ 1329.816265] kobject: 'input219': free name
[ 1329.835633] binder: 5930:5933 BC_FREE_BUFFER u0000000000000000 no match
[ 1329.841577] kobject: 'loop0' (000000002d872dc8): kobject_uevent_env
[ 1329.848824] kobject: 'loop0' (000000002d872dc8): fill_kobj_path: path = '/devices/virtual/block/loop0'
[ 1329.851445] binder: 5930:5933 unknown command 0
[ 1329.867124] binder: 5925:5926 ioctl c0306201 20000040 returned -14
[ 1329.870577] input input220: cannot allocate more than FF_MAX_EFFECTS effects
19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000006b00000072d907000f510007140028", 0x22)

19:42:27 executing program 5:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece0300000000bb000072d907000f510007140028", 0x22)
prctl$PR_GET_TSC(0x19, 0x0)

[ 1329.875532] kobject: 'loop4' (00000000d2c52f77): kobject_uevent_env
[ 1329.888961] kobject: 'input220' (00000000516c9b88): kobject_cleanup, parent           (null)
[ 1329.898524] kobject: 'loop4' (00000000d2c52f77): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1329.898866] binder: 5930:5933 ioctl c0306201 20000040 returned -22
[ 1329.913910] kobject: 'loop5' (000000002259ed43): kobject_uevent_env
[ 1329.918637] kobject: 'input220' (00000000516c9b88): calling ktype release
[ 1329.928552] kobject: 'input220': free name
19:42:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1d, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\fc\x00\x00\nc\b@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t'], 0x0, 0x0, 0x0})

19:42:27 executing program 4:
r0 = socket(0x10, 0x83000000003, 0x0)
write(r0, &(0x7f0000000040)="220000001e0063fffc01fd03ef6ece030000016b00000072d907000f510007140028", 0x22)

19:42:27 executing program 2:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00', {0xfffffffffffffff7}, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff2a8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x505]}, 0x45c)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)

19:42:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x35, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0c63000000634040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x20000000, 0x0, 0x0})

[ 1329.949783] kobject: 'loop5' (000000002259ed43): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1329.970920] kobject: 'loop2' (00000000e149c2d3): kobject_uevent_env
19:42:28 executing program 0:
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/d