$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:31 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x50000000000040)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f00000003c0)='y\x00', 0x2, 0x1)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
openat$cgroup_int(r1, &(0x7f0000000380)='cgroup.max.descendants\x00', 0x2, 0x0)
write$evdev(r1, &(0x7f0000000100)=[{{0x77359400}, 0x16, 0x8}, {{0x77359400}, 0x1f, 0x100000000000, 0x7ff}], 0x30)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setfsuid(r2)
epoll_create1(0x0)
ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={@null='               \x00', 0x6, 'veth0_to_hsr\x00'})
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1545.920693][T11918] binder: 11917:11918 ioctl 40046207 0 returned -16
[ 1545.957886][T11926] binder_alloc: 11917: binder_alloc_buf, no vma
[ 1545.991778][T11926] binder: 11917:11926 transaction failed 29189/-3, size 4980736--549755813892 line 3147
[ 1546.074751][T22621] binder_release_work: 10 callbacks suppressed
[ 1546.074759][T22621] binder: undelivered TRANSACTION_ERROR: 29201
02:40:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000600000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1546.127900][T22621] binder: undelivered TRANSACTION_ERROR: 29189
02:40:31 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
execve(0x0, 0x0, 0x0)
getpgrp(0x0)

02:40:31 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1546.325455][T11940] binder: 11937:11940 transaction failed 29201/-22, size 6291456--549755813892 line 3147
[ 1546.408618][T11943] binder_alloc: binder_alloc_mmap_handler: 11937 20ff9000-20ffd000 already mapped failed -16
[ 1546.451721][T11940] binder: BINDER_SET_CONTEXT_MGR already set
[ 1546.498947][T11940] binder: 11937:11940 ioctl 40046207 0 returned -16
02:40:32 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1546.589993][T11948] binder_alloc: 11937: binder_alloc_buf, no vma
[ 1546.596424][T11948] binder: 11937:11948 transaction failed 29189/-3, size 6291456--549755813892 line 3147
[ 1546.608031][T22621] binder: undelivered TRANSACTION_ERROR: 29189
[ 1546.621925][T22621] binder: undelivered TRANSACTION_ERROR: 29201
02:40:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000680000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:32 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1546.827486][T11954] binder: 11953:11954 transaction failed 29201/-22, size 6815744--549755813892 line 3147
02:40:32 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x4, 0x200)
epoll_create1(0x80000)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'NETMAP\x00'}, &(0x7f0000000200)=0x1e)
syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x40, 0x101001)
pipe(&(0x7f0000000180))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x800, 0x0)

[ 1546.908232][T11958] binder_alloc: binder_alloc_mmap_handler: 11953 20ff9000-20ffd000 already mapped failed -16
02:40:32 executing program 1:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{}, "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"}, 0x2b7)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3:U\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setgroups(0x252, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
sendfile(r1, r0, 0x0, 0x71b)

[ 1546.997515][T11958] binder: 11953:11958 transaction failed 29189/-3, size 6815744--549755813892 line 3147
[ 1547.031375][T11963] binder: BINDER_SET_CONTEXT_MGR already set
02:40:32 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1547.072330][T22621] binder: undelivered TRANSACTION_ERROR: 29201
[ 1547.078942][T11963] binder: 11953:11963 ioctl 40046207 0 returned -16
02:40:32 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
futex(&(0x7f000000cffc)=0x2000000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x223)

[ 1547.120005][T22621] binder: undelivered TRANSACTION_ERROR: 29189
02:40:32 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000006c0000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1547.310566][T11979] binder: 11978:11979 transaction failed 29201/-22, size 7077888--549755813892 line 3147
02:40:32 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1547.369545][T11982] binder_alloc: binder_alloc_mmap_handler: 11978 20ff9000-20ffd000 already mapped failed -16
02:40:32 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
execve(0x0, 0x0, 0x0)
getpgrp(0x0)

02:40:32 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1547.411688][T11979] binder: BINDER_SET_CONTEXT_MGR already set
02:40:32 executing program 1:
getrandom(&(0x7f0000000180)=""/69, 0x45, 0x3)

[ 1547.462204][T11979] binder: 11978:11979 ioctl 40046207 0 returned -16
[ 1547.513353][T11993] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1547.513363][T11993] binder_alloc: 11978: binder_alloc_buf, no vma
[ 1547.558431][T22621] binder: undelivered TRANSACTION_ERROR: 29201
[ 1547.569859][T11993] binder: 11978:11993 transaction failed 29189/-3, size 7077888--549755813892 line 3147
02:40:33 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:33 executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x0, 0x80000000042)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000000000000000000000000000c7d8c1a0ba17000000393c15729606024ebfafe50a0000000000"], 0x2a)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/252, 0xfc}], 0x1)

[ 1547.641693][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
02:40:33 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0xbf, 0xfffffffffffffff7, "66c2bc134aae6f7c0401f12f0e5e4b6ddb7d47f669ff81454d78cb03f1820a77e2e01a9ca8a21b6cf7fe5021d431f344538494af3f346ac8596fa63fccfaec5a80a8d1ee0af36c6ca67d5b7e4b0b0614bbca517639891d6c8cde0c1fa5c6c38e18db290d87a92f9a901dc7239a0381dc248e37af29c012b4437f01b6706982daa1b82045fcdcd41b6e4a0bba746bb47ef810ef1ef8c10a425e8ca5d9a37bff49d53418f0ec67a0560422c0b8622683b5603c31be5d47e2"}, &(0x7f0000000240), 0x400)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xe5, 0x1, 0x1f, 0x7fff, 0x10000, 0x1ff, 0x401, 0xfff, 0x7fffffff, 0xecd6, 0xff}, 0xb)

02:40:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000740000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:33 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:33 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040))
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf, 0x0, 0xa9})

02:40:33 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1547.975885][T12009] binder: 12006:12009 transaction failed 29201/-22, size 7602176--549755813892 line 3147
02:40:33 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = gettid()
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x7)
fcntl$setsig(r2, 0xa, 0x12)
fcntl$setownex(r2, 0xf, &(0x7f00002cb000)={0x0, r1})
recvmsg(r3, &(0x7f000070bfc8)={0x0, 0x0, 0x0}, 0x0)
dup2(r0, r3)
tkill(r1, 0x13)

[ 1548.062372][T12018] binder_alloc: binder_alloc_mmap_handler: 12006 20ff9000-20ffd000 already mapped failed -16
[ 1548.127014][T12009] binder: BINDER_SET_CONTEXT_MGR already set
02:40:33 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1548.193846][T12009] binder: 12006:12009 ioctl 40046207 0 returned -16
[ 1548.219353][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1548.230682][T12018] binder_alloc: 12006: binder_alloc_buf, no vma
[ 1548.268314][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
02:40:33 executing program 3:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x910, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2000000000000002, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

02:40:33 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000007a0000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:33 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe2(&(0x7f0000000000), 0x0)

[ 1548.455725][T12037] binder_alloc: binder_alloc_mmap_handler: 12033 20ff9000-20ffd000 already mapped failed -16
[ 1548.489642][T12034] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.495694][T12034] binder: 12033:12034 ioctl 40046207 0 returned -16
02:40:34 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1548.533273][T12037] binder_alloc: 12033: binder_alloc_buf, no vma
02:40:34 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0xdd78, 0x440000)
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0xb, 0xb1, 0x647f, 0x4, 0x5, 0x2, 0xfffffffffffffffd, {<r1=>0x0, @in6={{0xa, 0x4e21, 0x5, @ipv4={[], [], @loopback}, 0x6}}, 0x1f, 0x0, 0x1, 0xc5a, 0x20000000007ff}}, &(0x7f0000000240)=0xb0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x5, 0x30, 0x2dc12a23, 0x670}, &(0x7f00000002c0)=0x18)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$llc(r2, &(0x7f0000000040)={0x1a, 0x6, 0x6, 0xe3f, 0x6, 0x100000001, @broadcast}, 0x10)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000380)={0x10000, 0x7, 0xfff, 0x3}, 0x8)
ioctl$BLKRRPART(r3, 0x125f, 0x0)

02:40:34 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000140), 0xff0d)

02:40:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000300000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10)
write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)

02:40:34 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:34 executing program 2:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

[ 1548.834922][T12059] binder_alloc: binder_alloc_mmap_handler: 12056 20ff9000-20ffd000 already mapped failed -16
02:40:34 executing program 3:
syz_open_procfs(0x0, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r0, 0x40096101, &(0x7f0000000040)={{0x0, @name="65e33eeffe28d934af9ff203fdf5015d59cf158d4a5d240993e198c77855d776"}, 0x8})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$vnet(0xffffffffffffffff, 0x0, 0x0)

[ 1548.887349][T12057] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.906463][T12057] binder: 12056:12057 ioctl 40046207 0 returned -16
[ 1548.915803][T12059] binder_alloc: 12056: binder_alloc_buf, no vma
02:40:34 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='cgroup\x00', 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000900)='./file0\x00', 0x0, 0x0, 0x0, 0x80020, 0x0)

02:40:34 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="174d20a7066c3a7a89d4b03e40fcafc55aa1bc2e6c3f4a997f88f5faaf9272408974140b78c329ee858c245386c9843f47895bc1aa891ab0febc97afed3b36df38c968dd2d5ccf815d258cec504e8ab3fa5f", 0x52}, {&(0x7f0000000200)="6b101e4157965ad75a84e0913f3f8e17240a75f5a168100cd1c6e8e6ae10eab11f3371e2548b249c891876da57856ba32abd7ec29487d43999a27a1596a9dd6c7e2ad35cdbc8e2ba0c9e93ca154c51b0b852d127c65d3cfe442def00b35dfce92917a8d18537c997d529a7a2151f1aafff5274715cb25ce48058f6bc3aa4cad911f9afa9408259fbbd0b10cae24219dcdd24924f4e6ba079585c9738734f5a09a8", 0xa1}], 0x2, 0x6)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000500000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:34 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1549.073024][T12080] QAT: Stopping all acceleration devices.
[ 1549.084192][T12087] binder_alloc: binder_alloc_mmap_handler: 12084 20ff9000-20ffd000 already mapped failed -16
[ 1549.100089][T12088] QAT: Stopping all acceleration devices.
02:40:34 executing program 1:
r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
dup2(r1, r2)

02:40:34 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
dup3(r0, r0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
close(r0)
syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ftruncate(r1, 0x2008000)
sendfile(r0, r1, 0x0, 0x80000000000d)

[ 1549.131690][T12086] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.168283][T12086] binder: 12084:12086 ioctl 40046207 0 returned -16
02:40:34 executing program 2:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x81785501, &(0x7f0000000100)=ANY=[])

02:40:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000600000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1549.394395][T12109] binder_alloc: binder_alloc_mmap_handler: 12105 20ff9000-20ffd000 already mapped failed -16
[ 1549.404809][T12106] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.418508][T12106] binder: 12105:12106 ioctl 40046207 0 returned -16
[ 1549.448717][T12109] binder_alloc: 12105: binder_alloc_buf, no vma
02:40:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000700000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:35 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000000)=0x54)

02:40:35 executing program 1:
r0 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000680))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000006c0), &(0x7f0000000700)=0xc)
mkdir(&(0x7f0000000840)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000003380)=""/4096, 0xffffffffffffff8d)
getdents(r1, 0x0, 0x0)
getuid()

02:40:35 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:35 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1549.642529][T12116] binder_alloc: binder_alloc_mmap_handler: 12114 20ff9000-20ffd000 already mapped failed -16
[ 1549.658607][T12115] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.668864][T12115] binder: 12114:12115 ioctl 40046207 0 returned -16
[ 1549.693194][T12116] binder_alloc: 12114: binder_alloc_buf, no vma
02:40:35 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c)

02:40:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000a00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:35 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:35 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = dup(r0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x7)
r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020029bd7000fcdbdf250f00000034000900080001000300000008000200fdffffff080001000200000008000100000000000800020001000000"], 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0x9)
close(r4)

02:40:35 executing program 2:
getrandom(&(0x7f0000000100)=""/69, 0xfffffffffffffeca, 0x2)

02:40:35 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080), 0x4)

02:40:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000002000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:35 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:35 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)

02:40:35 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880)='/dev/null\x00', 0x200000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[])
fsetxattr$security_selinux(r1, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='udf\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000008c0)={0x5, 0x22e, 0xfa00, {&(0x7f0000000600), 0xffffffffffffffff, 0x2}}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8)
sendmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)="5cf3b3", 0x3}], 0x1}}, {{&(0x7f00000012c0)=@rc={0x1f, {0x200, 0x6, 0x0, 0x2d25982b, 0x0, 0x8000}, 0x8}, 0x80, 0x0}, 0x2}], 0x2, 0xc081)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

[ 1550.262961][T12151] binder: BINDER_SET_CONTEXT_MGR already set
[ 1550.301795][T12151] binder: 12150:12151 ioctl 40046207 0 returned -16
02:40:35 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f00000000c0)=0xae)

02:40:36 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet(0x2, 0x100000000805, 0x0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0xb, &(0x7f0000745ffc), &(0x7f0000b96000)=0x35b)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000280)=0x8001)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x20000)
ftruncate(r3, 0x7)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="d305a94cd5351d736f7fa1e1967f851291d9d391432aad450bb233797bd4401a123b549e24a8e6a90b8873d2814df127b1dd21", @ANYRES16=r4, @ANYBLOB="0c072bbd7000fedbdf25150000002c0004001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b0000cc0001002c0004001400010002004e227f00000100000000000000001400020002004e24ac1e000100000000000000000c00020008000200080000002c0004001400010002004e24ffffffff00000000000000001400020002004e21e000000200000000000000002c0004001400010002004e21ac1414aa00000000000000001400020002004e237f0000010000000000000000380004001400010002004e23ac14141e0000000000000000200002000a004e21fffffffffe8000000000000000000000000000aa6e0400005c000100380004001400010002004e24e00000010000000000000000200002000a004e2200007fff00000000000000000000ffffac1414aa07000000100001006574683a79616d300000000008000300f82f000008000300ff00000008000600040002002401010038000400200001000a004e210000092eff010000000000000000000000000001080000001400020002004e21ffffffff00000000000000003400020008000300fdffffff080002000700000008000300f7ffffff08000200040000000800020009000000080003000100ffff2c0004001400010002004e247f00000100000000000000001400020002004e20e0000001000000000000000008000300f9ffffff44000400200001000a004e217fffffff74c8bf1588609637d0d860ce47c5c6943f000000200002000a004e24fffffffd00000000000000000000000000000000060000003c0002000800020005000000080002000200000008000300b0f0000008000200a82a0000080003000000010008000200f80000000800010013000000200004001c000700080001000e000000080002000400000008000400faffffff300004000c00070008000400830000001400010062726f6164636173742d6c696e6b00000c00010073797a30000000003400090008000100080000000800020001000000080002003c980000080002000100000008000200010000000800020002000000"], 0x318}, 0x1, 0x0, 0x0, 0x44}, 0x4c800)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000240)={0x0, @speck128, 0x3, "4c7d45d8ef7f5ce9"})

02:40:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000004800000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:36 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:36 executing program 1:

02:40:36 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = dup(r0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x7)
r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020029bd7000fcdbdf250f00000034000900080001000300000008000200fdffffff080001000200000008000100000000000800020001000000"], 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0x9)
close(r4)

02:40:36 executing program 1:

[ 1550.967246][T12183] binder_transaction: 14 callbacks suppressed
[ 1550.967265][T12183] binder: 12180:12183 transaction failed 29201/-22, size 1207959552--549755813892 line 3147
[ 1551.012440][T12187] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1551.019910][T12187] binder_alloc: binder_alloc_mmap_handler: 12180 20ff9000-20ffd000 already mapped failed -16
[ 1551.048851][T12183] binder: BINDER_SET_CONTEXT_MGR already set
02:40:36 executing program 1:

[ 1551.061313][T12183] binder: 12180:12183 ioctl 40046207 0 returned -16
[ 1551.079438][T12187] binder_alloc: 12180: binder_alloc_buf, no vma
[ 1551.086623][T12187] binder: 12180:12187 transaction failed 29189/-3, size 1207959552--549755813892 line 3147
02:40:36 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = epoll_create1(0x0)
pipe(&(0x7f0000000340))
fcntl$addseals(r0, 0x409, 0x2)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1551.130840][ T9824] binder_release_work: 13 callbacks suppressed
[ 1551.130852][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1551.148002][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
02:40:36 executing program 1:

02:40:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000004c00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1551.275426][T12200] binder: 12199:12200 transaction failed 29201/-22, size 1275068416--549755813892 line 3147
02:40:36 executing program 2:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000880)='/dev/null\x00', 0x200000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[])
fsetxattr$security_selinux(r1, &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000480)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x2)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)='udf\x00', 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000008c0)={0x5, 0x22e, 0xfa00, {&(0x7f0000000600), 0xffffffffffffffff, 0x2}}, 0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='vmnet1security@systemem1:\x00'}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080))
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000040))
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ppoll(&(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000001340), 0x8)
sendmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000b40)="5cf3b3", 0x3}], 0x1}}, {{&(0x7f00000012c0)=@rc={0x1f, {0x200, 0x6, 0x0, 0x2d25982b, 0x0, 0x8000}, 0x8}, 0x80, 0x0}, 0x2}], 0x2, 0xc081)
umount2(&(0x7f0000000140)='./file0\x00', 0x0)

02:40:36 executing program 1:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setpriority(0x0, 0x0, 0x0)

[ 1551.338298][T12201] binder_alloc: binder_alloc_mmap_handler: 12199 20ff9000-20ffd000 already mapped failed -16
[ 1551.357778][T12200] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.367367][T12200] binder: 12199:12200 ioctl 40046207 0 returned -16
02:40:36 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:36 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = dup(r0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000001c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x7)
r2 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020029bd7000fcdbdf250f00000034000900080001000300000008000200fdffffff080001000200000008000100000000000800020001000000"], 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0x9)
close(r4)

[ 1551.407982][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1551.415388][T12201] binder_alloc: 12199: binder_alloc_buf, no vma
[ 1551.459565][T12201] binder: 12199:12201 transaction failed 29189/-3, size 1275068416--549755813892 line 3147
[ 1551.505618][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:37 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

[ 1551.665708][T12221] binder: 12219:12221 transaction failed 29201/-22, size 1610612736--549755813892 line 3147
[ 1551.727117][T12223] binder_alloc: binder_alloc_mmap_handler: 12219 20ff9000-20ffd000 already mapped failed -16
[ 1551.751827][T12221] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.766247][T12221] binder: 12219:12221 ioctl 40046207 0 returned -16
02:40:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006800000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:37 executing program 1:

02:40:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1551.798366][T12223] binder_alloc: 12219: binder_alloc_buf, no vma
[ 1551.806784][T12223] binder: 12219:12223 transaction failed 29189/-3, size 1610612736--549755813892 line 3147
[ 1551.816902][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1551.826156][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1551.910167][T12229] binder: 12228:12229 transaction failed 29201/-22, size 1744830464--549755813892 line 3147
[ 1551.974670][T12234] binder_alloc: binder_alloc_mmap_handler: 12228 20ff9000-20ffd000 already mapped failed -16
[ 1551.988642][T12234] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.997933][T12234] binder: 12228:12234 ioctl 40046207 0 returned -16
[ 1552.006616][T12236] binder_alloc: 12228: binder_alloc_buf, no vma
[ 1552.014196][T12236] binder: 12228:12236 transaction failed 29189/-3, size 1744830464--549755813892 line 3147
[ 1552.024978][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1552.033028][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:37 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x1, 0x80000)
write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '*'}, {0x20, 'GPLposix_acl_access'}], 0xa, "67f1fdb6e329ce276f33f517eafaebe3386a9995b8fbd29bce81bb839dd72cc26ac71033377ba4161f592d2d38af0877f85b9ed4e6b89b0edbb5bb885436b8e2d19f96e71dd98122870314465f2c4c306359d79869843915af90698e99f45b4d37855d8403415dfc4103546b14b3c1b9805565a362e93fddb1a9f520d38a7d"}, 0xd0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfff, 0x1})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:37 executing program 3:

02:40:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006c00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1552.169870][T12244] binder: 12242:12244 transaction failed 29201/-22, size 1811939328--549755813892 line 3147
[ 1552.215567][T12248] binder_alloc: binder_alloc_mmap_handler: 12242 20ff9000-20ffd000 already mapped failed -16
[ 1552.228259][T12248] binder: 12242:12248 transaction failed 29189/-3, size 1811939328--549755813892 line 3147
[ 1552.229395][T12244] binder: BINDER_SET_CONTEXT_MGR already set
02:40:37 executing program 2:

02:40:37 executing program 1:

02:40:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:37 executing program 3:

[ 1552.264026][T12244] binder: 12242:12244 ioctl 40046207 0 returned -16
[ 1552.270114][T22621] binder: undelivered TRANSACTION_ERROR: 29201
[ 1552.304810][T22621] binder: undelivered TRANSACTION_ERROR: 29189
02:40:37 executing program 2:

02:40:37 executing program 1:

02:40:37 executing program 3:

02:40:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000007400000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:37 executing program 2:

[ 1552.529008][T12266] binder_alloc: binder_alloc_mmap_handler: 12261 20ff9000-20ffd000 already mapped failed -16
[ 1552.580323][T12264] binder: BINDER_SET_CONTEXT_MGR already set
[ 1552.600551][T12264] binder: 12261:12264 ioctl 40046207 0 returned -16
[ 1552.608846][T12267] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1552.608855][T12267] binder_alloc: 12261: binder_alloc_buf, no vma
02:40:38 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x4000, 0x2)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=<r1=>0x0, @ANYBLOB="15ebac347519b6a5ffbab9be50ca0cae000000000000000000"], &(0x7f00000001c0)=0x1d)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0xa1, 0x5, 0x8, 0x101, 0x1, 0x80, 0x3, 0x5, r1}, &(0x7f0000000240)=0x20)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000380))
ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000040)=0x2)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:38 executing program 1:

02:40:38 executing program 3:

02:40:38 executing program 2:

02:40:38 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000007a00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:38 executing program 2:

[ 1553.079754][T12282] binder_alloc: binder_alloc_mmap_handler: 12279 20ff9000-20ffd000 already mapped failed -16
02:40:38 executing program 1:

02:40:38 executing program 3:

[ 1553.127937][T12281] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.181359][T12281] binder: 12279:12281 ioctl 40046207 0 returned -16
[ 1553.209547][T12288] binder_alloc: 12279: binder_alloc_buf, no vma
02:40:38 executing program 1:

02:40:38 executing program 2:

02:40:38 executing program 3:

02:40:39 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x900, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x110, r1, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb814}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c5d8d53}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}]}, 0x110}}, 0xc0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x80000)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:39 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000010000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:39 executing program 1:

02:40:39 executing program 2:

02:40:39 executing program 3:

02:40:39 executing program 2:

02:40:39 executing program 1:

[ 1554.070270][T12311] binder_alloc: binder_alloc_mmap_handler: 12305 20ff9000-20ffd000 already mapped failed -16
02:40:39 executing program 3:

[ 1554.131825][T12309] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.171937][T12309] binder: 12305:12309 ioctl 40046207 0 returned -16
02:40:39 executing program 2:

[ 1554.195613][T12317] binder_alloc: 12305: binder_alloc_buf, no vma
02:40:39 executing program 1:

02:40:39 executing program 3:

02:40:40 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x1)
accept4$tipc(r1, &(0x7f00000001c0)=@name, &(0x7f0000000280)=0x10, 0x800)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040)
pipe(&(0x7f00000002c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000020000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:40 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:40:40 executing program 2:

02:40:40 executing program 3:

02:40:40 executing program 1:

02:40:40 executing program 2:

02:40:40 executing program 1:

[ 1555.041208][T12340] binder_alloc: binder_alloc_mmap_handler: 12334 20ff9000-20ffd000 already mapped failed -16
02:40:40 executing program 3:

[ 1555.086820][T12339] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.125737][T12339] binder: 12334:12339 ioctl 40046207 0 returned -16
02:40:40 executing program 3:

02:40:40 executing program 2:

02:40:40 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0xffffffffffffffff, 0x0)
ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000040)='syz0\x00')
epoll_create1(0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x4)
pipe(&(0x7f0000000180))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000030000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:40 executing program 1:

02:40:40 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

02:40:40 executing program 2:

02:40:40 executing program 3:

[ 1555.386580][T12365] binder_alloc: binder_alloc_mmap_handler: 12360 20ff9000-20ffd000 already mapped failed -16
02:40:40 executing program 1:

[ 1555.437955][T12362] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.467582][T12370] binder_alloc: 12360: binder_alloc_buf, no vma
[ 1555.478482][T12362] binder: 12360:12362 ioctl 40046207 0 returned -16
02:40:40 executing program 2:

02:40:40 executing program 3:

02:40:41 executing program 1:

02:40:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000040000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:41 executing program 2:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c61, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')

[ 1555.693695][T12383] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.727729][T12384] binder_alloc: 12380: binder_alloc_buf, no vma
[ 1555.738825][T12383] binder: 12380:12383 ioctl 40046207 0 returned -16
02:40:41 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0)={0xfffffffffffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000140)={0x1b7, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:41 executing program 3:
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

02:40:41 executing program 1:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0)

02:40:41 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

02:40:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000050000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:41 executing program 2:
r0 = getpgid(0x0)
getpriority(0x2, r0)

[ 1556.156523][T12401] binder_transaction: 11 callbacks suppressed
[ 1556.158017][T12401] binder: 12394:12401 transaction failed 29201/-22, size 5497558138880--549755813892 line 3147
02:40:41 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="99", 0x1}], 0x1}, 0x100000001}], 0x1, 0x1)

02:40:41 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="1d"]})

02:40:41 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
getpeername$packet(0xffffffffffffff9c, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)

[ 1556.231799][T12407] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1556.231828][T12407] binder_alloc: binder_alloc_mmap_handler: 12394 20ff9000-20ffd000 already mapped failed -16
02:40:41 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2)
ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e5, &(0x7f00000001c0)={0x26, "d22087ec7e3faae56498a7f2016bab01b25c69a06b5b93b6d098ec2e12a40266da2ce98e341c270685e84c67bb44fec8c833c20cb65baaffec8b52cfd98ef222394745b53d4ba78d64da191787bae0f83f06408b8a5d49c2b58a155a13e154ebe2ebdd17d3bb689e7cab0f31724fef8ec0363948d2f4f68ce10602214b61c878"})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
clock_gettime(0x5, &(0x7f0000000040))
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x201, 0x0)
ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0xf)
ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000005c0)={0x82, 0x80, 0x7b7, 0x13, &(0x7f0000000380)=""/19, 0xfd, &(0x7f00000003c0)=""/253, 0xea, &(0x7f00000004c0)=""/234})
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000600)={0xf1c1, [0x2, 0x1, 0x200, 0x0, 0x1816d3b8, 0x40, 0x1, 0x7, 0x3, 0x0, 0x2, 0xedf, 0x3, 0xfff, 0x1, 0x2, 0xffffffffffffff8b, 0xe39a, 0x1, 0x100000001, 0x1, 0x0, 0x7fffffff, 0x7f, 0x3234, 0x55, 0x8, 0x0, 0x18000, 0x59, 0xe4, 0x80000001, 0x100000001, 0x8370, 0x0, 0x80000000, 0x8, 0x6, 0x1, 0xff, 0xd, 0x4, 0x70a9, 0x7fff, 0x5, 0x7ff, 0x7fffffff], 0x6})
pipe(&(0x7f00000006c0))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x200, 0x3, {0x1, 0x3, 0x5, 0x0, 0x6}})

[ 1556.344617][T12401] binder: BINDER_SET_CONTEXT_MGR already set
[ 1556.363481][T12407] binder_alloc: 12394: binder_alloc_buf, no vma
02:40:41 executing program 2:
mkdir(&(0x7f0000000200)='./file0\x00', 0x0)
setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', 0x0, 0x0, 0x0)
lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='security.ima\x00')

[ 1556.401419][ T8436] binder_release_work: 11 callbacks suppressed
[ 1556.401432][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1556.420677][T12401] binder: 12394:12401 ioctl 40046207 0 returned -16
02:40:41 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, 0xc6)
r1 = socket$netlink(0x10, 0x3, 0x12)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00')
pipe(&(0x7f0000000180)={<r2=>0xffffffffffffffff})
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x5b60}, 0x4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x18, 0x2, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040804)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000380)={0x80000000}, 0x4)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in6={{0xa, 0x4e24, 0x7, @mcast2, 0x4}}, 0x0, 0x5f, 0x0, "cc6ed17309a93b33c7d87f535d4760802132474d16fe608168910981dac5791e785b9395646e5627bc4ff623d0206d1eea7a1003000000377142ba3df5dbe0dfc9dd892e68478db07db13fd3d746a989"}, 0xd8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140)={0x8})
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x0, @dev={0xac, 0x14, 0x14, 0x28}, 0x4e24, 0x4, 'rr\x00', 0x32, 0x7, 0x58}, 0x2c)
write$cgroup_int(r3, &(0x7f0000000080), 0x2001007f)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000780)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000840), &(0x7f0000000880)=0xc)
pwritev(r3, &(0x7f0000002480)=[{&(0x7f00000000c0)="17", 0x1}], 0x1, 0x0)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000008c0)={0x0, 0x40000007fff, 0x80000001, 0xfffffffffffffffe}, 0x14)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @broadcast, @empty}, &(0x7f0000000340)=0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040)=0xe23e, 0x4)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r4, &(0x7f0000000000), 0x1a00)

[ 1556.456704][T12407] binder: 12394:12407 transaction failed 29189/-3, size 5497558138880--549755813892 line 3147
02:40:41 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000140)={'ip6gre0\x00', {0x2, 0x0, @initdev}})

02:40:42 executing program 2:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)

[ 1556.510811][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:42 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

02:40:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000060000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1556.610895][T12432] IPVS: set_ctl: invalid protocol: 0 172.20.20.40:20004
[ 1556.679129][T12441] binder: 12440:12441 transaction failed 29201/-22, size 6597069766656--549755813892 line 3147
[ 1556.707436][T12443] binder_alloc: binder_alloc_mmap_handler: 12440 20ff9000-20ffd000 already mapped failed -16
02:40:42 executing program 3:
r0 = epoll_create1(0x0)
r1 = epoll_create(0x4)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080))

[ 1556.726128][T12441] binder: BINDER_SET_CONTEXT_MGR already set
02:40:42 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socket$nl_generic(0xa, 0x3, 0x10)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r2, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1556.755791][T12441] binder: 12440:12441 ioctl 40046207 0 returned -16
[ 1556.788406][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1556.796529][T12443] binder_alloc: 12440: binder_alloc_buf, no vma
02:40:42 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117)
ioctl$KVM_NMI(r2, 0xae9a)
connect$caif(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[ 1556.840513][T12443] binder: 12440:12443 transaction failed 29189/-3, size 6597069766656--549755813892 line 3147
02:40:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1556.928913][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000070000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1557.073177][T12466] binder: 12464:12466 transaction failed 29201/-22, size 7696581394432--549755813892 line 3147
[ 1557.118507][T12469] binder_alloc: binder_alloc_mmap_handler: 12464 20ff9000-20ffd000 already mapped failed -16
[ 1557.130179][T12466] binder: BINDER_SET_CONTEXT_MGR already set
[ 1557.136445][T12466] binder: 12464:12466 ioctl 40046207 0 returned -16
[ 1557.136828][T12469] binder_alloc: 12464: binder_alloc_buf, no vma
[ 1557.149651][T12469] binder: 12464:12469 transaction failed 29189/-3, size 7696581394432--549755813892 line 3147
[ 1557.160203][T22621] binder: undelivered TRANSACTION_ERROR: 29201
[ 1557.170522][T22621] binder: undelivered TRANSACTION_ERROR: 29189
02:40:42 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x84800)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:42 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'})
unshare(0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KDDELIO(0xffffffffffffffff, 0x4b35, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f00000000c0))
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00\x00\x00\x00\x04\x00\x00\x00\x00\x06\x00', 0xfd})

[ 1557.374997][T12480] IPVS: set_ctl: invalid protocol: 0 172.20.20.40:20004
02:40:42 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000006a00)=[{{0x0, 0x0, 0x0}}], 0x5fd, 0x0, 0x0)

02:40:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000000a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:42 executing program 2:
r0 = getpgrp(0x0)
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x2f)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0d2fc73cda1fad73400000000000000061f6f5fb26228001557230da11f97404ca3d6bec5d668ac2a203006e57d4efac893ee0650754165699"], 0x39)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r1, 0x0, 0x0)

02:40:42 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
prctl$PR_MCE_KILL(0x21, 0x0, 0x0)

02:40:42 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1557.471438][T12487] binder: 12486:12487 transaction failed 29201/-22, size 10995116277760--549755813892 line 3147
[ 1557.487495][T12493] binder_alloc: binder_alloc_mmap_handler: 12486 20ff9000-20ffd000 already mapped failed -16
[ 1557.510770][T12487] binder: BINDER_SET_CONTEXT_MGR already set
[ 1557.517873][T12487] binder: 12486:12487 ioctl 40046207 0 returned -16
02:40:43 executing program 2:
mkdir(&(0x7f0000000700)='./file1\x00', 0x0)
r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
fsetxattr$security_evm(r0, 0x0, &(0x7f0000000500)=@v2={0x3, 0x0, 0x0, 0x7, 0x8a, "b71268ee7e119b80b99a78a086b418caa2900b1268f228374114e14624dc6aa3c0d55ce8724bae72dcaa9ac5332a1f9b824a9191062410cc3e840bf9cb6cefa2cffd7708d4cad60a3bdf52a30bc66378866137237236f2ad7885f7d722c85f3cff0805112fa9c33f07ce4732e30fd275572f7c96213ce3dff37bbfc47711cb7b13456fc70ae017880246"}, 0x94, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000b00)={{}, {}, [{}], {0x4, 0x1}, [{}, {}, {0x8, 0x7}], {}, {0x20, 0x2}}, 0x44, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e10f6bc7a42e84a3397cbc08fe6d7808cae9c43a3da7629f6d6fe702692cd1f86dcce2720a3cf2a4a497e1c9e974267ed7044fde46b1ac14f5dfb44f06c118696b96191e41f2d29aa7125c9974f619cd21ab9a07c41374a1ad9fa7e88b1bf39b3d000000"])
chdir(&(0x7f0000000380)='./file0\x00')
link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00')
getgid()

[ 1557.549416][T12493] binder_alloc: 12486: binder_alloc_buf, no vma
[ 1557.587879][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:40:43 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[]}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:40:43 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x20, 0x28021)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000009c0)={0x14}, 0x14}}, 0x0)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x2000}, {r0}, {0xffffffffffffffff, 0x8041}, {0xffffffffffffffff, 0x8200}], 0x4, 0x8)

[ 1557.594633][T12493] binder: 12486:12493 transaction failed 29189/-3, size 10995116277760--549755813892 line 3147
02:40:43 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1557.642661][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1557.836838][T12504] overlayfs: failed to resolve './file1': -2
02:40:43 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000100)=0x5, 0x4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000200000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:43 executing program 3:
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:43 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/28, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bf})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x402c5342, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000300)={0x0, 0x0, 0x0, {0x0, 0x1c9c380}})
r1 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12}, &(0x7f00000001c0))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0)
tkill(r1, 0x14)

02:40:43 executing program 0:
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = signalfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000003c0)={0x0, 0x2, {0x3, 0x2, 0x3, 0x0, 0x10000}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
clock_gettime(0x0, &(0x7f0000000000))
sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000f76f1a4e000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
r4 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000240)=0x3, &(0x7f0000000340)=0x2)
exit(0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
pread64(r1, &(0x7f00000001c0)=""/87, 0x57, 0x3a)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140))
sync_file_range(r0, 0x10001, 0x9, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x4000, 0x0)

02:40:43 executing program 2:
setresuid(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8)
finit_module(0xffffffffffffffff, 0x0, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, r0})
accept4(r0, 0x0, 0x0, 0x0)

02:40:43 executing program 3:
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1558.183410][T12529] binder: 12526:12529 transaction failed 29201/-22, size 35184372088832--549755813892 line 3147
02:40:43 executing program 1:
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000f80)=""/197, 0xc5}], 0x1, 0x0, 0x0, 0x7fffffff}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0)

02:40:43 executing program 3:
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1558.279179][T12543] binder_alloc: binder_alloc_mmap_handler: 12526 20ff9000-20ffd000 already mapped failed -16
[ 1558.349460][T12529] binder: BINDER_SET_CONTEXT_MGR already set
[ 1558.365043][T12529] binder: 12526:12529 ioctl 40046207 0 returned -16
02:40:43 executing program 1:
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffff9c, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f0000000f80)=""/197, 0xc5}], 0x1, 0x0, 0x0, 0x7fffffff}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0)

02:40:43 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1558.396409][T12554] binder_alloc: 12526: binder_alloc_buf, no vma
[ 1558.422314][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1558.432877][T12554] binder: 12526:12554 transaction failed 29189/-3, size 35184372088832--549755813892 line 3147
02:40:43 executing program 1:
socketpair$unix(0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mknod$loop(&(0x7f0000000380)='./file1\x00', 0x0, 0xffffffffffffffff)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb39000031daf05c9aa2b5a09e46c3c6b8cb38191ee36a38318e0c63bb4518958e5a11b9bc0150a6c4e66360eaf7ccab244f98a24e34ce02"], 0x1, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

[ 1558.486670][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:44 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20200, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@default, @bcast, 0x3, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
pipe(&(0x7f0000000340))
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000480000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:44 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:44 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070")
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58)

02:40:44 executing program 0:
readv(0xffffffffffffffff, 0x0, 0x0)
r0 = signalfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x8)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000003c0)={0x0, 0x2, {0x3, 0x2, 0x3, 0x0, 0x10000}})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
clock_gettime(0x0, &(0x7f0000000000))
sendmsg$key(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300030c000000000000200000000002000900400000f76f1a4e000000000003000600000000000200ee00e0000054d81458186fe8b90002000100000000000000020200044a7b030005000000000002000000e0003f010000000000fca0d9"], 0x60}}, 0x0)
r4 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40)
getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000240)=0x3, &(0x7f0000000340)=0x2)
exit(0x0)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
pread64(r1, &(0x7f00000001c0)=""/87, 0x57, 0x3a)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000140))
sync_file_range(r0, 0x10001, 0x9, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/zero\x00', 0x4000, 0x0)

02:40:44 executing program 2:
setresuid(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8)
finit_module(0xffffffffffffffff, 0x0, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, r0})
accept4(r0, 0x0, 0x0, 0x0)

02:40:44 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1559.097829][T12595] binder_alloc: binder_alloc_mmap_handler: 12590 20ff9000-20ffd000 already mapped failed -16
[ 1559.129869][T12591] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.170666][T12591] binder: 12590:12591 ioctl 40046207 0 returned -16
02:40:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000004c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:44 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:44 executing program 0:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

02:40:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4", 0x7, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

[ 1559.358003][T12622] binder_alloc: binder_alloc_mmap_handler: 12619 20ff9000-20ffd000 already mapped failed -16
02:40:44 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1559.421370][T12620] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.447767][T12620] binder: 12619:12620 ioctl 40046207 0 returned -16
[ 1559.447983][T12630] binder_alloc: 12619: binder_alloc_buf, no vma
02:40:45 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@getroute={0x14, 0x1a, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20004004)

02:40:45 executing program 0:
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e", 0x4, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

02:40:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f00000005c0)="9c35f03e6d72e4", 0x7, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

02:40:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000600000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:45 executing program 3:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x5, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:45 executing program 2:
setresuid(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8)
finit_module(0xffffffffffffffff, 0x0, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, r0})
accept4(r0, 0x0, 0x0, 0x0)

[ 1560.010410][T12653] binder_alloc: binder_alloc_mmap_handler: 12643 20ff9000-20ffd000 already mapped failed -16
02:40:45 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

[ 1560.055782][T12646] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.092866][T12646] binder: 12643:12646 ioctl 40046207 0 returned -16
02:40:45 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x10)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x100000000003, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008110e00f80ecdb4cb9d907631912080010013b000000120001000300000040d819a9060015000000", 0x2e}], 0x1}, 0x0)

02:40:45 executing program 0:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

[ 1560.106999][T12658] binder_alloc: 12643: binder_alloc_buf, no vma
02:40:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000680000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:45 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

[ 1560.181402][T12666] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
02:40:45 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f00000000c0)=[{0x20}, {0x6}]}, 0x10)
sendmmsg(r1, &(0x7f0000006e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

[ 1560.247742][T12673] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[ 1560.264481][T12674] binder_alloc: binder_alloc_mmap_handler: 12669 20ff9000-20ffd000 already mapped failed -16
[ 1560.284562][T12672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.342176][T12672] binder: 12669:12672 ioctl 40046207 0 returned -16
02:40:46 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000100)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000040), 0x8})

02:40:46 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0)

02:40:46 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:40:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000006c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:46 executing program 0:
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff)
mknod$loop(&(0x7f0000000380)='./file1\x00', 0x0, 0xffffffffffffffff)
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="00fb39000031daf05c9aa2b5a09e46c3c6b8cb38191ee36a38318e0c63bb4518958e5a11b9bc0150a6c4e66360eaf7ccab244f98a24e34ce02"], 0x1, 0x0)
rename(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000040)='./file1\x00')

02:40:46 executing program 2:
setresuid(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
timer_settime(0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8)
finit_module(0xffffffffffffffff, 0x0, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340))
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, r0})
accept4(r0, 0x0, 0x0, 0x0)

[ 1560.862863][T12690] binder_alloc: binder_alloc_mmap_handler: 12687 20ff9000-20ffd000 already mapped failed -16
02:40:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000740000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1560.913152][T12689] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.919862][T12689] binder: 12687:12689 ioctl 40046207 0 returned -16
[ 1560.926731][T12702] binder_alloc: 12687: binder_alloc_buf, no vma
02:40:46 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:46 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc))
write(r0, &(0x7f0000000300)="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", 0x138)
r1 = syz_open_pts(r0, 0x2)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140))

[ 1561.031413][T12709] binder: BINDER_SET_CONTEXT_MGR already set
02:40:46 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1561.072531][T12711] binder_alloc: 12706: binder_alloc_buf, no vma
[ 1561.098159][T12709] binder: 12706:12709 ioctl 40046207 0 returned -16
02:40:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000007a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:46 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1561.212199][T12723] binder_transaction: 11 callbacks suppressed
[ 1561.212216][T12723] binder: 12721:12723 transaction failed 29201/-22, size 134140418588672--549755813892 line 3147
[ 1561.275029][T12725] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1561.275047][T12725] binder_alloc: binder_alloc_mmap_handler: 12721 20ff9000-20ffd000 already mapped failed -16
[ 1561.308019][T12723] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.323456][T12723] binder: 12721:12723 ioctl 40046207 0 returned -16
[ 1561.335469][T12725] binder_alloc: 12721: binder_alloc_buf, no vma
[ 1561.345531][T12725] binder: 12721:12725 transaction failed 29189/-3, size 134140418588672--549755813892 line 3147
02:40:47 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0)
chdir(&(0x7f00000001c0)='./file1\x00')

02:40:47 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000008c0)={0x0, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)='bridge_slave_1\x00'})
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x0, 0x81, 0xa}, 0xc)

02:40:47 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:40:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000fffffdfd0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:47 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x0, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:47 executing program 2:
r0 = socket(0x10, 0x1000040000000003, 0x0)
write(r0, &(0x7f0000000000)="22000000140007058d1b0000004c030402080313010000000800020041b8f376ab00", 0x22)

02:40:47 executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000000)="120000001a00e5ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000003840)=""/4096, 0x1000}], 0x1)

02:40:47 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x0, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1561.846899][T12748] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1561.859967][T12751] binder: 12750:12751 transaction failed 29201/-22, size 279267363454976--549755813892 line 3147
[ 1561.904959][T12757] binder_alloc: binder_alloc_mmap_handler: 12750 20ff9000-20ffd000 already mapped failed -16
[ 1561.919499][T12751] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.943479][T12757] binder_alloc: 12750: binder_alloc_buf, no vma
02:40:47 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x0, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:40:47 executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3199c070")
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f0000005040), 0x15f, 0x0)

02:40:47 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100000000000100, 0xba)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000100)="1c0300000310600000c50100fff51b4202938207d9fb03809132df4a731efc7d157efc1962c875096f8433e9609d45296714701e0ab01aa4b305d5440177faa0", 0x40, 0x0, 0x0, 0x0)

[ 1561.968951][ T9146] binder_release_work: 13 callbacks suppressed
[ 1561.968959][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1561.996268][T12751] binder: 12750:12751 ioctl 40046207 0 returned -16
[ 1562.029481][T12757] binder: 12750:12757 transaction failed 29189/-3, size 279267363454976--549755813892 line 3147
02:40:47 executing program 2:
r0 = socket(0x10, 0x1000040000000003, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x100012, r0, 0x0)

[ 1562.083471][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1562.139353][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1562.145170][    C0] protocol 88fb is buggy, dev hsr_slave_1
[ 1562.151095][    C0] protocol 88fb is buggy, dev hsr_slave_0
[ 1562.156866][    C0] protocol 88fb is buggy, dev hsr_slave_1
02:40:48 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r2 = epoll_create1(0x0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4)
pipe(&(0x7f0000000340)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)={0x0, 0x100000006, 0x2})
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000001c0)=0x1)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f0000000180))
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100))
setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000240)=0xbf9f, 0x4)

02:40:48 executing program 3:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x31, 0x0, &(0x7f0000001000))

02:40:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000fdfdffff0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:48 executing program 2:
r0 = socket$packet(0x11, 0x10000000003, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4)
getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000040))

02:40:48 executing program 0:
r0 = socket$inet6(0xa, 0x80002, 0x0)
unshare(0x24020400)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4)

02:40:48 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:40:48 executing program 3:
r0 = socket(0x10, 0x80003, 0xc)
write(r0, &(0x7f0000000000)="1f0000000202fffffd706ed685058c194333323b54c007110000f30501000b", 0x1f)

02:40:48 executing program 0:
r0 = socket$inet6(0xa, 0x803, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'syz_tun\x00\x00\x80\x00\x00\x80\x00@\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000002"]})

[ 1562.600132][T12784] binder: 12783:12784 transaction failed 29201/-22, size 281474942959616--549755813892 line 3147
[ 1562.657281][T12797] binder_alloc: binder_alloc_mmap_handler: 12783 20ff9000-20ffd000 already mapped failed -16
02:40:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1562.734253][T12805] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1562.737916][T12797] binder_alloc: 12783: binder_alloc_buf, no vma
[ 1562.746015][T12784] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.758391][T12797] binder: 12783:12797 transaction failed 29189/-3, size 281474942959616--549755813892 line 3147
02:40:48 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00')
fstatfs(r1, 0x0)
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, 0x0)
preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x7)
dup2(r0, r2)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)={0x80, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x4, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @rand_addr=0xff}}]}, 0x290)

02:40:48 executing program 3:
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00')
preadv(r1, &(0x7f0000000480), 0x1000000000000237, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0)
ioctl$KIOCSOUND(r1, 0x4b2f, 0x0)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)

[ 1562.799140][T12784] binder: 12783:12784 ioctl 40046207 0 returned -16
[ 1562.799711][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1562.825082][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:40:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:48 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
rt_sigtimedwait(&(0x7f0000000040)={0x9}, 0x0, &(0x7f0000000100)={0x77359400}, 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:48 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bc070")
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0)
getsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000280), &(0x7f0000001080)=0x4)

02:40:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000200000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:48 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
poll(&(0x7f0000000000), 0x200000000000006d, 0xfffffffffffffffc)
socket(0x0, 0x800, 0x3f)
write(r1, &(0x7f00000001c0), 0xfffffef3)
read(r0, &(0x7f0000000040)=""/250, 0xab2febf)

02:40:48 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

02:40:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4000000000000004)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
readv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/229, 0xe5}], 0x1)

02:40:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1563.523268][T12841] binder: 12832:12841 transaction failed 29201/-22, size 33554432--549755813892 line 3147
[ 1563.553140][T12845] binder_alloc: binder_alloc_mmap_handler: 12832 20ff9000-20ffd000 already mapped failed -16
[ 1563.597979][T12841] binder: BINDER_SET_CONTEXT_MGR already set
[ 1563.621979][T12841] binder: 12832:12841 ioctl 40046207 0 returned -16
[ 1563.626414][T12853] binder_alloc: 12832: binder_alloc_buf, no vma
[ 1563.662336][T12853] binder: 12832:12853 transaction failed 29189/-3, size 33554432--549755813892 line 3147
[ 1563.701386][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1563.709087][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:49 executing program 0:
r0 = socket(0x10, 0x2, 0x0)
write(r0, &(0x7f0000000080)="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", 0xfc)
socketpair(0x0, 0x0, 0x0, 0x0)

02:40:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000300000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:49 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)

02:40:49 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003)

[ 1563.860732][T12870] binder: 12869:12870 transaction failed 29201/-22, size 50331648--549755813892 line 3147
[ 1563.918764][T12874] binder_alloc: binder_alloc_mmap_handler: 12869 20ff9000-20ffd000 already mapped failed -16
[ 1563.980240][T12870] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.013269][T12870] binder: 12869:12870 ioctl 40046207 0 returned -16
[ 1564.013392][T12879] binder_alloc: 12869: binder_alloc_buf, no vma
[ 1564.056379][T12879] binder: 12869:12879 transaction failed 29189/-3, size 50331648--549755813892 line 3147
[ 1564.064321][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1564.129867][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:49 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000040))
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000200)={0x6})
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, [], 0x29}}, {0xa, 0x4e23, 0x7, @empty}, 0x8, [0xb89, 0x1, 0xff, 0x5, 0x9, 0x92, 0xffffffff80000001, 0xec]}, 0x5c)

02:40:49 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc)

02:40:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000400000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:49 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:40:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ppoll(&(0x7f0000000380)=[{r0}], 0x1, 0x0, 0x0, 0x0)

[ 1564.428620][T12893] binder_alloc: binder_alloc_mmap_handler: 12887 20ff9000-20ffd000 already mapped failed -16
[ 1564.443592][T12889] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.465987][T12893] binder_alloc: 12887: binder_alloc_buf, no vma
02:40:49 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc)

[ 1564.496302][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1564.504199][T12889] binder: 12887:12889 ioctl 40046207 0 returned -16
[ 1564.518497][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:40:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000500000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:50 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)

[ 1564.663786][T12909] binder_alloc: binder_alloc_mmap_handler: 12907 20ff9000-20ffd000 already mapped failed -16
02:40:50 executing program 0:
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

[ 1564.730250][T12908] binder_alloc: 12907: binder_alloc_buf, no vma
[ 1564.751601][T12912] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.760528][T12912] binder: 12907:12912 ioctl 40046207 0 returned -16
02:40:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000600000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1564.869131][   T26] audit: type=1804 audit(1553308850.309:88): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir527648463/syzkaller.RKRGxF/2805/bus" dev="sda1" ino=16862 res=1
02:40:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000700000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1564.957438][T12922] binder_alloc: binder_alloc_mmap_handler: 12920 20ff9000-20ffd000 already mapped failed -16
[ 1564.968446][T12921] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.975610][T12921] binder: 12920:12921 ioctl 40046207 0 returned -16
[ 1564.982547][T12922] binder_alloc: 12920: binder_alloc_buf, no vma
[ 1565.092404][T12926] binder_alloc: binder_alloc_mmap_handler: 12924 20ff9000-20ffd000 already mapped failed -16
[ 1565.120649][T12925] binder: BINDER_SET_CONTEXT_MGR already set
[ 1565.126675][T12925] binder: 12924:12925 ioctl 40046207 0 returned -16
02:40:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000a00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1565.167414][T12926] binder_alloc: 12924: binder_alloc_buf, no vma
[ 1565.292550][T12931] binder_alloc: binder_alloc_mmap_handler: 12928 20ff9000-20ffd000 already mapped failed -16
[ 1565.313496][T12929] binder: BINDER_SET_CONTEXT_MGR already set
[ 1565.321617][T12929] binder: 12928:12929 ioctl 40046207 0 returned -16
[ 1565.351655][   T26] audit: type=1804 audit(1553308850.799:89): pid=12933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir527648463/syzkaller.RKRGxF/2805/bus" dev="sda1" ino=16862 res=1
02:40:50 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)

02:40:50 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000240)={<r1=>0x0, 0x8}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={r1, 0x58, "090745dc783de08bee22e49b141d42c934dba641848d5db90236369787181c6630f26dff7c75daa8456f3b2c21f54722c9c7a9e8d4e44d291682398f04676597ab5a36e37f820686439d639a7c4f05bd9e64a1d8ba513e81"}, &(0x7f00000002c0)=0x60)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x2, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x38)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r3}}, 0x18)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:50 executing program 3:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[ 1565.394317][T12931] binder_alloc: 12928: binder_alloc_buf, no vma
02:40:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000004800000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1565.470201][   T26] audit: type=1804 audit(1553308850.809:90): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir527648463/syzkaller.RKRGxF/2805/bus" dev="sda1" ino=16862 res=1
02:40:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)

02:40:51 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x0)

02:40:51 executing program 3:
dup(0xffffffffffffffff)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000002c0), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x14)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x2)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r3, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000c40)=ANY=[@ANYRES32], 0x4)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

[ 1565.561054][T12945] binder: BINDER_SET_CONTEXT_MGR already set
[ 1565.570735][T12948] binder_alloc: 12944: binder_alloc_buf, no vma
[ 1565.587596][T12945] binder: 12944:12945 ioctl 40046207 0 returned -16
02:40:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000004c00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1565.743352][T12961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1565.759464][   T26] audit: type=1804 audit(1553308851.199:91): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir261276618/syzkaller.A2giSr/2504/bus" dev="sda1" ino=16862 res=1
[ 1565.789339][T12961] binder: 12960:12961 ioctl 40046207 0 returned -16
[ 1565.790277][T12962] binder_alloc: 12960: binder_alloc_buf, no vma
[ 1565.820382][   T26] audit: type=1804 audit(1553308851.209:92): pid=12958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir261276618/syzkaller.A2giSr/2504/bus" dev="sda1" ino=16862 res=1
02:40:51 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000500))

02:40:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:51 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000840)=""/148, 0x94}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00')
preadv(r0, &(0x7f0000000700), 0x31f, 0x0)

[ 1566.103683][T12970] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.126915][T12971] binder_alloc: 12969: binder_alloc_buf, no vma
[ 1566.141329][T12970] binder: 12969:12970 ioctl 40046207 0 returned -16
02:40:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006800000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:51 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

[ 1566.356871][T12980] binder_transaction: 16 callbacks suppressed
[ 1566.356888][T12980] binder: 12979:12980 transaction failed 29201/-22, size 1744830464--549755813892 line 3147
02:40:51 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000040)={0x0, 0x0, {0x3, 0xe3, 0xe6, 0x1}})
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000100)=0x7)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:51 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1566.501108][T12988] binder_alloc_mmap_handler: 3 callbacks suppressed
[ 1566.501126][T12988] binder_alloc: binder_alloc_mmap_handler: 12979 20ff9000-20ffd000 already mapped failed -16
[ 1566.546517][T12980] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.586690][T12980] binder: 12979:12980 ioctl 40046207 0 returned -16
02:40:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1566.628869][T12955] cgroup: fork rejected by pids controller in /syz3
[ 1566.634090][T12997] binder: 12979:12997 transaction failed 29189/-3, size 1744830464--549755813892 line 3147
02:40:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000006c00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:52 executing program 0:
r0 = socket$inet(0x2, 0x0, 0x0)
pipe(0x0)
bind$inet(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x200096dc)

[ 1566.803728][T13049] binder: 13033:13049 transaction failed 29201/-22, size 1811939328--549755813892 line 3147
[ 1566.861874][T13100] binder_alloc: binder_alloc_mmap_handler: 13033 20ff9000-20ffd000 already mapped failed -16
[ 1566.884277][T13100] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.910391][   T26] audit: type=1804 audit(1553308852.349:93): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir261276618/syzkaller.A2giSr/2504/bus" dev="sda1" ino=16862 res=1
[ 1566.944258][T13100] binder: 13033:13100 ioctl 40046207 0 returned -16
[ 1567.155090][   T26] audit: type=1804 audit(1553308852.599:94): pid=12963 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir261276618/syzkaller.A2giSr/2504/bus" dev="sda1" ino=16862 res=1
[ 1567.181314][   T26] audit: type=1804 audit(1553308852.629:95): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir261276618/syzkaller.A2giSr/2504/bus" dev="sda1" ino=16862 res=1
02:40:52 executing program 3:

02:40:52 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000007400000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:52 executing program 0:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
pivot_root(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00')

02:40:52 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

02:40:52 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
clock_gettime(0x0, &(0x7f0000002a40)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f00000029c0)=[{{&(0x7f0000000180)=@caif=@util, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000100)=""/2, 0x2}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/202, 0xca}], 0x4, &(0x7f0000001480)=""/110, 0x6e}, 0x8}, {{&(0x7f0000001500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/252, 0xfc}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f0000002680)=""/20, 0x14}, {&(0x7f00000026c0)=""/211, 0xd3}, {&(0x7f00000027c0)=""/154, 0x9a}], 0x6, &(0x7f0000002900)=""/156, 0x9c}, 0x100000001}], 0x2, 0x42, &(0x7f0000002a80)={r2, r3+30000000})

[ 1567.494179][T13123] binder: 13121:13123 transaction failed 29201/-22, size 1946157056--549755813892 line 3147
02:40:53 executing program 0:

[ 1567.544981][T13133] binder_alloc: binder_alloc_mmap_handler: 13121 20ff9000-20ffd000 already mapped failed -16
02:40:53 executing program 3:

02:40:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1567.588370][T13123] binder: BINDER_SET_CONTEXT_MGR already set
[ 1567.626585][T13123] binder: 13121:13123 ioctl 40046207 0 returned -16
[ 1567.626646][T13133] binder: 13121:13133 transaction failed 29189/-3, size 1946157056--549755813892 line 3147
02:40:53 executing program 0:

02:40:53 executing program 3:

[ 1567.667657][ T8436] binder_release_work: 17 callbacks suppressed
[ 1567.667665][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1567.698155][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:53 executing program 0:

02:40:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000007a00000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:53 executing program 3:

[ 1567.852792][T13153] binder: 13151:13153 transaction failed 29201/-22, size 2046820352--549755813892 line 3147
[ 1567.865256][T13154] binder_alloc: binder_alloc_mmap_handler: 13151 20ff9000-20ffd000 already mapped failed -16
[ 1567.876039][T13153] binder: BINDER_SET_CONTEXT_MGR already set
[ 1567.895470][T13153] binder: 13151:13153 ioctl 40046207 0 returned -16
02:40:53 executing program 0:

[ 1567.904024][T13154] binder: 13151:13154 transaction failed 29189/-3, size 2046820352--549755813892 line 3147
[ 1567.930027][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1567.957900][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:53 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

02:40:53 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x103, 0x0)
epoll_create1(0x0)
write$P9_RLERROR(r0, &(0x7f0000000040)={0x18, 0x7, 0x2, {0xf, '/dev/dri/card#\x00'}}, 0x18)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)

02:40:53 executing program 3:

02:40:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:53 executing program 0:

02:40:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000003000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:53 executing program 0:

02:40:53 executing program 3:

[ 1568.415993][T13171] binder: 13170:13171 transaction failed 29201/-22, size 12884901888--549755813892 line 3147
[ 1568.466866][T13175] binder_alloc: binder_alloc_mmap_handler: 13170 20ff9000-20ffd000 already mapped failed -16
02:40:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1568.518729][T13171] binder: BINDER_SET_CONTEXT_MGR already set
[ 1568.530700][T13171] binder: 13170:13171 ioctl 40046207 0 returned -16
[ 1568.537499][T13181] binder: 13170:13181 transaction failed 29189/-3, size 12884901888--549755813892 line 3147
02:40:54 executing program 0:

02:40:54 executing program 3:

[ 1568.573084][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1568.584110][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:40:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000005000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1568.693823][T13192] binder: 13191:13192 transaction failed 29201/-22, size 21474836480--549755813892 line 3147
[ 1568.723805][T13194] binder_alloc: binder_alloc_mmap_handler: 13191 20ff9000-20ffd000 already mapped failed -16
[ 1568.736364][T13192] binder: BINDER_SET_CONTEXT_MGR already set
02:40:54 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

[ 1568.744404][T13192] binder: 13191:13192 ioctl 40046207 0 returned -16
[ 1568.749475][T13194] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1568.749485][T13194] binder_alloc: 13191: binder_alloc_buf, no vma
[ 1568.780342][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1568.790334][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:54 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$TIOCNXCL(r1, 0x540d)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:54 executing program 0:

02:40:54 executing program 3:

02:40:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000006000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:54 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

[ 1569.384475][T13206] binder_alloc: binder_alloc_mmap_handler: 13202 20ff9000-20ffd000 already mapped failed -16
02:40:54 executing program 3:

02:40:54 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:54 executing program 0:

[ 1569.428600][T13203] binder: BINDER_SET_CONTEXT_MGR already set
02:40:54 executing program 0:

[ 1569.480901][T13203] binder: 13202:13203 ioctl 40046207 0 returned -16
[ 1569.487948][T13215] binder_alloc: 13202: binder_alloc_buf, no vma
[ 1569.515802][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1569.524312][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:55 executing program 3:

02:40:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000007000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:55 executing program 0:

[ 1569.650508][T13225] binder_alloc: binder_alloc_mmap_handler: 13223 20ff9000-20ffd000 already mapped failed -16
[ 1569.663163][T13224] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.682936][T13224] binder: 13223:13224 ioctl 40046207 0 returned -16
02:40:55 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20800000003)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:55 executing program 3:

02:40:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000a000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:55 executing program 0:

02:40:55 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

02:40:55 executing program 0:

[ 1570.256289][T13236] binder_alloc: binder_alloc_mmap_handler: 13231 20ff9000-20ffd000 already mapped failed -16
02:40:55 executing program 3:

02:40:55 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1570.303387][T13234] binder: BINDER_SET_CONTEXT_MGR already set
[ 1570.323393][T13234] binder: 13231:13234 ioctl 40046207 0 returned -16
[ 1570.337384][T13242] binder_alloc: 13231: binder_alloc_buf, no vma
02:40:55 executing program 0:

02:40:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000020000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:55 executing program 3:

02:40:55 executing program 0:

[ 1570.512432][T13257] binder_alloc: binder_alloc_mmap_handler: 13254 20ff9000-20ffd000 already mapped failed -16
[ 1570.556162][T13255] binder: BINDER_SET_CONTEXT_MGR already set
[ 1570.569914][T13255] binder: 13254:13255 ioctl 40046207 0 returned -16
[ 1570.594298][T13257] binder_alloc: 13254: binder_alloc_buf, no vma
02:40:56 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x80)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:56 executing program 0:

02:40:56 executing program 3:

02:40:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000048000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:56 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

02:40:56 executing program 3:

02:40:56 executing program 0:

[ 1571.175157][T13270] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.200687][T13271] binder_alloc: 13265: binder_alloc_buf, no vma
[ 1571.207077][T13270] binder: 13265:13270 ioctl 40046207 0 returned -16
02:40:56 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000004c000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:56 executing program 0:

02:40:56 executing program 3:

[ 1571.350289][T13283] binder: BINDER_SET_CONTEXT_MGR already set
02:40:56 executing program 0:

[ 1571.396537][T13284] binder_alloc: 13280: binder_alloc_buf, no vma
[ 1571.396695][T13283] binder: 13280:13283 ioctl 40046207 0 returned -16
[ 1571.431723][T13284] binder_transaction: 12 callbacks suppressed
[ 1571.431743][T13284] binder: 13280:13284 transaction failed 29189/-3, size 326417514496--549755813892 line 3147
02:40:57 executing program 5:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/xfrm_stat\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000400)={@local, 0x30, r1})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={<r3=>0x0, 0xce6, 0x7, 0x9, 0x8, 0x5}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e22, 0x100000001, @ipv4={[], [], @local}, 0x8}}, 0x100, 0x5, 0x27, 0x6, 0x2}, &(0x7f0000000280)=0x98)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)={0xf002, 0x5000, 0x7, 0x9, 0x401})
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:40:57 executing program 3:

02:40:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:57 executing program 0:

02:40:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000060000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:57 executing program 1:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

02:40:57 executing program 3:

02:40:57 executing program 0:

[ 1572.102999][T13304] binder: 13302:13304 transaction failed 29201/-22, size 412316860416--549755813892 line 3147
02:40:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:40:57 executing program 3:

[ 1572.178940][T13312] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1572.178967][T13312] binder_alloc: binder_alloc_mmap_handler: 13302 20ff9000-20ffd000 already mapped failed -16
02:40:57 executing program 0:

02:40:57 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1572.272339][T13312] binder_alloc: 13302: binder_alloc_buf, no vma
[ 1572.285598][T13318] binder: BINDER_SET_CONTEXT_MGR already set
[ 1572.296525][T13312] binder: 13302:13312 transaction failed 29189/-3, size 412316860416--549755813892 line 3147
[ 1572.337415][T13318] binder: 13302:13318 ioctl 40046207 0 returned -16
02:40:58 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000040)={0x0, 0x8001, 0xffffffffffffffff, 0x6, 0x11, 0x3})
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/22)

02:40:58 executing program 3:

02:40:58 executing program 0:

02:40:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000068000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:58 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:40:58 executing program 0:

[ 1572.986822][T13334] binder: 13329:13334 transaction failed 29201/-22, size 446676598784--549755813892 line 3147
02:40:58 executing program 3:

[ 1573.033369][T13337] binder_alloc: binder_alloc_mmap_handler: 13329 20ff9000-20ffd000 already mapped failed -16
[ 1573.055909][T13334] binder: BINDER_SET_CONTEXT_MGR already set
[ 1573.067955][T13334] binder: 13329:13334 ioctl 40046207 0 returned -16
02:40:58 executing program 3:

02:40:58 executing program 0:

[ 1573.102488][ T8436] binder_release_work: 12 callbacks suppressed
[ 1573.102496][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1573.113420][T13337] binder_alloc: 13329: binder_alloc_buf, no vma
[ 1573.136498][T13337] binder: 13329:13337 transaction failed 29189/-3, size 446676598784--549755813892 line 3147
02:40:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000006c000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1573.154012][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:58 executing program 0:

02:40:58 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1573.274148][T13352] binder: 13349:13352 transaction failed 29201/-22, size 463856467968--549755813892 line 3147
[ 1573.309857][T13354] binder_alloc: binder_alloc_mmap_handler: 13349 20ff9000-20ffd000 already mapped failed -16
[ 1573.320523][T13352] binder: BINDER_SET_CONTEXT_MGR already set
[ 1573.326668][T13352] binder: 13349:13352 ioctl 40046207 0 returned -16
[ 1573.334536][T13354] binder_alloc: 13349: binder_alloc_buf, no vma
[ 1573.341795][T13354] binder: 13349:13354 transaction failed 29189/-3, size 463856467968--549755813892 line 3147
[ 1573.352509][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1573.359430][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:40:59 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)

02:40:59 executing program 3:

02:40:59 executing program 0:

02:40:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000074000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:40:59 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:40:59 executing program 0:

02:40:59 executing program 3:

[ 1573.951349][T13367] binder: 13360:13367 transaction failed 29201/-22, size 498216206336--549755813892 line 3147
02:40:59 executing program 3:

02:40:59 executing program 0:

02:40:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1574.033310][T13372] binder_alloc: binder_alloc_mmap_handler: 13360 20ff9000-20ffd000 already mapped failed -16
[ 1574.059543][T13367] binder: BINDER_SET_CONTEXT_MGR already set
02:40:59 executing program 0:

02:40:59 executing program 3:

[ 1574.107898][T13367] binder: 13360:13367 ioctl 40046207 0 returned -16
[ 1574.119920][T13377] binder_alloc: 13360: binder_alloc_buf, no vma
[ 1574.160529][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1574.167425][T13377] binder: 13360:13377 transaction failed 29189/-3, size 498216206336--549755813892 line 3147
[ 1574.204403][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:00 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000040)=0x60)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:00 executing program 0:

02:41:00 executing program 3:

02:41:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000007a000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:00 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:00 executing program 0:
perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c62, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e)

[ 1574.784187][T13393] binder: 13388:13393 transaction failed 29201/-22, size 523986010112--549755813892 line 3147
02:41:00 executing program 3:
r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000600)={'ip_vti0\x00', 0x201e})
dup3(r0, r1, 0x0)

[ 1574.835403][T13398] binder_alloc: binder_alloc_mmap_handler: 13388 20ff9000-20ffd000 already mapped failed -16
[ 1574.888845][T13393] binder: BINDER_SET_CONTEXT_MGR already set
[ 1574.909663][T13393] binder: 13388:13393 ioctl 40046207 0 returned -16
[ 1574.916726][T13405] binder_alloc: 13388: binder_alloc_buf, no vma
[ 1574.923966][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1574.931677][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000100fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:00 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/192, 0xc0}, 0x7ff}], 0x1, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/ptmx\x00', 0x20002, 0x0)
exit(0x0)
writev(r0, &(0x7f00000023c0), 0x1000000000000252)

02:41:00 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1575.053264][T13414] binder_alloc: binder_alloc_mmap_handler: 13411 20ff9000-20ffd000 already mapped failed -16
02:41:00 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
setns(0xffffffffffffffff, 0x0)

[ 1575.094961][T13413] binder: BINDER_SET_CONTEXT_MGR already set
[ 1575.122566][T13413] binder: 13411:13413 ioctl 40046207 0 returned -16
[ 1575.132873][T13414] binder_alloc: 13411: binder_alloc_buf, no vma
[ 1575.143722][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1575.159770][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:00 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:01 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xffff, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000100)=@v1={0x2, "6a97f51dbbf42dda27d2f4beb7078faa73ec"}, 0x13, 0x3)

02:41:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000200fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:01 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:01 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:01 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
setns(0xffffffffffffffff, 0x0)

[ 1575.731771][T13439] binder_alloc: binder_alloc_mmap_handler: 13432 20ff9000-20ffd000 already mapped failed -16
[ 1575.757759][T13438] binder: BINDER_SET_CONTEXT_MGR already set
[ 1575.775456][T13438] binder: 13432:13438 ioctl 40046207 0 returned -16
02:41:01 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000380)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000280)={0x1ff, <r1=>0x0, 0x10001, 0x4})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000400)={r1, 0x9})
r2 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}, &(0x7f0000000340)=0x10)
epoll_create1(0x80000)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x10040, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x34, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc000000}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c0d4}, 0x10)

[ 1575.789563][T13439] binder_alloc: 13432: binder_alloc_buf, no vma
02:41:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000300fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:01 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
write(r0, &(0x7f0000000040)="97fead1dc0dcc37d3a8e1fc6918b8411e27d536f60f2d94f74f70f187cc9", 0x1e)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1575.921252][T13459] binder_alloc: binder_alloc_mmap_handler: 13456 20ff9000-20ffd000 already mapped failed -16
02:41:01 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x0, 0x201)
readahead(r0, 0x0, 0x0)

[ 1575.981696][T13459] binder_alloc: 13456: binder_alloc_buf, no vma
[ 1576.008305][T13463] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.037919][T13463] binder: 13456:13463 ioctl 40046207 0 returned -16
02:41:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000400fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:01 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[ 1576.207317][T13472] binder_alloc: binder_alloc_mmap_handler: 13469 20ff9000-20ffd000 already mapped failed -16
[ 1576.229722][T13471] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.238429][T13471] binder: 13469:13471 ioctl 40046207 0 returned -16
02:41:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000500fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1576.269052][T13472] binder_alloc: 13469: binder_alloc_buf, no vma
[ 1576.453576][T13479] binder_transaction: 9 callbacks suppressed
[ 1576.453595][T13479] binder: 13478:13479 transaction failed 29201/-22, size 1407374883553280--549755813892 line 3147
[ 1576.485435][T13479] binder_alloc: binder_alloc_mmap_handler: 13478 20ff9000-20ffd000 already mapped failed -16
02:41:02 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1576.507280][T13479] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.517479][T13480] binder_alloc: 13478: binder_alloc_buf, no vma
[ 1576.529577][T13479] binder: 13478:13479 ioctl 40046207 0 returned -16
[ 1576.536407][T13480] binder: 13478:13480 transaction failed 29189/-3, size 1407374883553280--549755813892 line 3147
02:41:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000600fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:02 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

02:41:02 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1576.790084][T13490] binder: 13489:13490 transaction failed 29201/-22, size 1688849860263936--549755813892 line 3147
02:41:02 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, &(0x7f0000000040)={&(0x7f0000000080), 0x8})

[ 1576.854375][T13490] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.879652][T13495] binder_alloc: 13489: binder_alloc_buf, no vma
[ 1576.897647][T13490] binder: 13489:13490 ioctl 40046207 0 returned -16
02:41:02 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1576.910767][T13495] binder: 13489:13495 transaction failed 29189/-3, size 1688849860263936--549755813892 line 3147
02:41:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000700fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:02 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x0, 0x2, 0x0, "ab0fcd6bab3b2cfd0cddb7c3a1e923e2f3e75d5d552110cc1e65abda28722bc2"})

[ 1577.080124][T13506] binder: 13505:13506 transaction failed 29201/-22, size 1970324836974592--549755813892 line 3147
02:41:02 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:41:02 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1577.134001][T13509] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.150789][T13510] binder_alloc: 13505: binder_alloc_buf, no vma
[ 1577.174640][T13509] binder: 13505:13509 ioctl 40046207 0 returned -16
[ 1577.224216][T13510] binder: 13505:13510 transaction failed 29189/-3, size 1970324836974592--549755813892 line 3147
02:41:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:02 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1577.441172][T13521] binder: 13520:13521 transaction failed 29201/-22, size 2814749767106560--549755813892 line 3147
02:41:02 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1577.492014][T13522] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1577.492031][T13522] binder_alloc: binder_alloc_mmap_handler: 13520 20ff9000-20ffd000 already mapped failed -16
[ 1577.516945][T13521] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.542310][T13521] binder: 13520:13521 ioctl 40046207 0 returned -16
[ 1577.559495][T13522] binder_alloc: 13520: binder_alloc_buf, no vma
[ 1577.578693][T13522] binder: 13520:13522 transaction failed 29189/-3, size 2814749767106560--549755813892 line 3147
02:41:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000002000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1577.698944][T13535] binder: 13534:13535 transaction failed 29201/-22, size 9007199254740992--549755813892 line 3147
02:41:03 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, [""]}, 0x24}}, 0x4008004)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
r2 = getpgid(0x0)
ptrace(0x8, r2)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1577.742381][T13538] binder_alloc: binder_alloc_mmap_handler: 13534 20ff9000-20ffd000 already mapped failed -16
[ 1577.777743][T13535] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.821060][T13535] binder: 13534:13535 ioctl 40046207 0 returned -16
[ 1577.861967][T13538] binder: 13534:13538 transaction failed 29189/-22, size 9007199254740992--549755813892 line 2994
02:41:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1578.013168][T13545] binder_alloc: binder_alloc_mmap_handler: 13543 20ff9000-20ffd000 already mapped failed -16
[ 1578.047945][T13544] binder: BINDER_SET_CONTEXT_MGR already set
[ 1578.065800][T13544] binder: 13543:13544 ioctl 40046207 0 returned -16
02:41:03 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:03 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1578.212990][T13551] binder_alloc: binder_alloc_mmap_handler: 13547 20ff9000-20ffd000 already mapped failed -16
[ 1578.248914][T13550] binder: BINDER_SET_CONTEXT_MGR already set
02:41:03 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

02:41:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1578.265846][ T9146] binder_release_work: 18 callbacks suppressed
[ 1578.265853][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1578.290417][T13550] binder: 13547:13550 ioctl 40046207 0 returned -16
[ 1578.299920][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:03 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1578.409341][T13563] binder_alloc: binder_alloc_mmap_handler: 13558 20ff9000-20ffd000 already mapped failed -16
[ 1578.441668][T13561] binder: BINDER_SET_CONTEXT_MGR already set
02:41:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1578.463057][T13561] binder: 13558:13561 ioctl 40046207 0 returned -16
[ 1578.484178][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1578.493322][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1578.613168][T13576] binder_alloc: binder_alloc_mmap_handler: 13572 20ff9000-20ffd000 already mapped failed -16
[ 1578.647386][T13575] binder: BINDER_SET_CONTEXT_MGR already set
02:41:04 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040))

[ 1578.667123][T13575] binder: 13572:13575 ioctl 40046207 0 returned -16
[ 1578.696081][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1578.715295][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1578.942305][T13596] binder_alloc: binder_alloc_mmap_handler: 13594 20ff9000-20ffd000 already mapped failed -16
02:41:04 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1578.986438][T13595] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.007785][T13595] binder: 13594:13595 ioctl 40046207 0 returned -16
[ 1579.037982][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1579.058908][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:04 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007400fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:04 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1579.206415][T13604] binder_alloc: binder_alloc_mmap_handler: 13602 20ff9000-20ffd000 already mapped failed -16
[ 1579.242303][T13603] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.249089][T13603] binder: 13602:13603 ioctl 40046207 0 returned -16
[ 1579.265194][T13604] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1579.265203][T13604] binder_alloc: 13602: binder_alloc_buf, no vma
[ 1579.295079][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1579.305016][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:04 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
setuid(0x0)

[ 1579.421848][T13617] binder_alloc: binder_alloc_mmap_handler: 13613 20ff9000-20ffd000 already mapped failed -16
[ 1579.456882][T13614] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.483244][T13614] binder: 13613:13614 ioctl 40046207 0 returned -16
02:41:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000fffffdfd00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:05 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
r1 = request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)='[nodev\xb6\x00', 0xfffffffffffffffd)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
prctl$PR_GET_SECUREBITS(0x1b)
epoll_create1(0x80000)
keyctl$search(0xa, r1, &(0x7f00000001c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x1}, r2)

[ 1579.633170][T13624] binder_alloc: binder_alloc_mmap_handler: 13622 20ff9000-20ffd000 already mapped failed -16
[ 1579.681663][T13623] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.705194][T13623] binder: 13622:13623 ioctl 40046207 0 returned -16
[ 1579.705535][T13626] binder_alloc: 13622: binder_alloc_buf, no vma
02:41:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000fdfdffff00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:05 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1579.934985][T13633] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.955039][T13634] binder_alloc: 13631: binder_alloc_buf, no vma
[ 1579.979393][T13633] binder: 13631:13633 ioctl 40046207 0 returned -16
02:41:05 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

02:41:05 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000002000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:05 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

[ 1580.120307][T13644] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.144049][T13645] binder_alloc: 13643: binder_alloc_buf, no vma
[ 1580.166852][T13644] binder: 13643:13644 ioctl 40046207 0 returned -16
02:41:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000003000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1580.334927][T13655] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.351920][T13656] binder_alloc: 13653: binder_alloc_buf, no vma
[ 1580.378153][T13655] binder: 13653:13655 ioctl 40046207 0 returned -16
02:41:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000004000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:06 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00', 0x1000})

[ 1580.558447][T13659] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.584605][T13660] binder_alloc: 13658: binder_alloc_buf, no vma
02:41:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

[ 1580.629765][T13659] binder: 13658:13659 ioctl 40046207 0 returned -16
02:41:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000005000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:06 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1580.798782][T13672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.823573][T13673] binder_alloc: 13671: binder_alloc_buf, no vma
[ 1580.859685][T13672] binder: 13671:13672 ioctl 40046207 0 returned -16
02:41:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

02:41:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000006000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000007000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1581.036676][T13689] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.050708][T13690] binder_alloc: 13686: binder_alloc_buf, no vma
[ 1581.057350][T13689] binder: 13686:13689 ioctl 40046207 0 returned -16
02:41:06 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

02:41:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1581.186492][T13697] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.206735][T13698] binder_alloc: 13692: binder_alloc_buf, no vma
[ 1581.226186][T13697] binder: 13692:13697 ioctl 40046207 0 returned -16
02:41:06 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x3, 0x2)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
sendto$inet(r0, &(0x7f0000000380)="6809bbda355ad30a4a0b7b21d89038e1672197ff1509780907bfa603024de0207a871ad77bac0beae8e7b2fe06a8014afadb15113e63d5f51f8125a95de4599bc21b404e3104ae1b96a590d7789fc2cf6fadc1cae4fc450f12a374095c50c54508d361554c7562aff5fce53484c7a5f75bd50abfa49b2e3e1db293dc1ea32e8ecbfe7f028b1f66b11def758914a5cd7e1939ce93f95942dc4ca2ae997884226d464acd1795c22a20a8e7fff2c03ad4ffbd60d1aa6cd486ec75a52d5ad8af8a83f8dec854d3e7fd6445931f8b251113672a44614c2fbdf479fd085930d6db289f3244ef506c026f64f323369c3006ea167a5603d6e0b3bcb8d143c5f7b03129ad5fa31506102791a9b4efee18abdd53f5d79a96644c7fdcba564bf862abbd0f69bb614464674a5b9a8c4dff4fc1fa495ebf02ce1957450823f5f469d09505561e0ad79e934bcc829c87aa05378bda38c9fbb5f490c22814c6975f684ca7ee6fee49b3ce9c67c63110f85e9e333f09de320c42509cdb5a8e7845ed523c378fd83d5e5ea64eef6583af592cbcee4d029edbff9219695569b876c3a662d6798e46494dd6890200db04431307fa19df345bb4555a7a25b9cba3e23c8bfb36c78594afe05d85e2d9e88173bdf5b2b29fd3537e9e5e4a4c2e455fa2f6c8987cef2102590fc90a488755b54badc95351b4917590bf2b82e22f55e4b21b16f2e71e09bedbfb7e9e0f9e26a56a90e565b7157e71b07b7a481671f81c1f8dab0d9095f5bbd6cb09dd8159c62cafd320831a5c88678184cf853dca51a31e2c838bc5718c4b1648348176a7385d545572dbff8a3aa26418eb0b82b86ccee0037cb5d9a7aa3da1d3b78f29eb96335ed2138041dde0d0d60fe1b2e3a6dfcf38cf9e61a0811f2958ba2619cb49e644765ff7ec59e538d9d219746fe5b2c45aa3317fd519d3a79d60f73fe04b6e03854e1b547dda763b5eb6f60fa06dff46eb17e78811576aa57a6388b6afc69a1c7a98de21c080fd6c7cef85eb1d2a7d07279f2651d2d155cd621f7c1e61d56b94f77d926c52ad21bd9f1b92dd5d03a1c93201ee5c62cbd6d6ffbcda8d4317a559758c991b09b321f3087c3bcd290be325121b10be403d67a0016a8e44ce1bfd6f5c62b3ad3633a2a85ce61a2c550c3f4e3f2ab82c5059f5842899c57420f23f3ab69741621fbbcb5ca3c56c4b0b612964f02f981a698c30b4e802082df11caa4a1682d0f19460b7fa9f153c691cdca8c85089aaca752bfeed498b3854461a2e01795c86ceed239aca7de85a883f7111510a3a6ac8c8815e3b57e4aab708bbb23560e24e36b660f30b719916ebd0a37482ca1dae84a125c9e52aa76ac4ac08333056e37585bb506048d787a6d8538b212995bf86315ef80fd5a9db4e2c390c8f01b780cbe34020d3f4a961b29687b63f230bbb23f443cb3c6806edf21be05edfa60d4509e9764200318a541655b2fde2493bb2189451d038b5a2e9d9c1af02f46498d011c370df11ba1ea0c9d990fd615c11532b4b292654a4016caf2575dc62f49aedf30b7e04eb6b14e7c54857504724ecd1ae33493ec48a379f440b5baa87cfce8114fdd17e0ba264647d50446214c76aa42edd82295572d16b1e19eb76a3d57724aa2ee4d1b4666ece5bbe91106bd120a5df11945fb0e5e1c61ddcffe7a96fa65fad46c853bc00a06fcfb53ac1288015645e03105d0b31ad4451a515bb39a7e19c302fc57e0599bc3a881da852e703692681d7263d6f89a092aec0a49c71669ff5b7728a4331e9a8c250be11ecd1eaa4e800a0fc13c87154a0a192e2f5bac572260fa1cfb9069a1ffcfc9289dfa5cabef4cd1a40e0e77a95120bc61b4d195de21ad4d9144e3cb4a527d4f7eb2d0a1b03bf21e394c6ad73da9bbe2aaefc9259d9a4bf7df94ae3f3c094490d2817a694f6884a56d754dbea27ef74085ffda9bdb185ecb7e76b31cd06736c6d163fcf9aeade3f553b381e0c0df3a84c6c41d271291d51651124d2b258ec9874262ac4e3ff3050fa87da56dc0034427cb0d14b22686108fecd60bb53ab4d12293d284b9a9e3f7916d3f807a403a89dc1d1e40c3e03e556f263c758aa47e9ae6d82be838a318c66a65bc46b4e25f48ece37d654615feff56ffbc008ed72fb1bee31b6ee7ba00abe7ff4e97f88cd527a587ac32132ccf21fb601f01f390a6a8c7136567884e220abb0c6999f314289c1a89bbd10fcad337a896aa028bf013ceb5e513d76ae1c684c33d12424e590f4530e047b2ec29ccfa2620367ba57d48c3146e1ee209d14fd99024835b2eae0b3b02a6b08bdb3d9ff71c098d786653f3e4427054246e470c91a3e871f20d4b7e0341c700ba4686afba1af344cf33dadd6cc3949cd9de3c454697a8b65c9d31e08110d51881f5ed0f33bceff73466ac4c57c9accf8f537f41695523d92eaf2f3f0596dd3c5f81a1bb33c4b95de9b6c0880f8e124e6ab76e231c2d81cb83a2916660299e42593fbaedbba4b770f2ad91c81b31fdfa3a774073f0189ceaba6e9b48fd71ad5db2594da4d5086d2b0ea1ff79d07b41aa24336962af62f140c22cc7e5b10a12d6ffd5a201350702fcc335c6bcba669fb83c079222f0ba0c6da2ac951affc90fbc2a316a3d3dad776020ecca8e0b265fad665d3aa9c6f9f75cbd80ef8751f143c9bb492c4249e68bc4fd0d2e7dd46390911d27ca7a719b1a080521c784a0460751f9f28ff45a32f8cc3d4c6fc8bd720497b26a8278cdf3575e2bfced86c017b35dc27778783d163c46f598a6868153a24f71c15e71a4a1323da5d6e5939cddb9776b6a6bde1ce7cbd6e5ff0655f5d70ada260e3f85a087884b4eaa860b1cc6422f657d4943396d3fdef6b9315aedb28c4a808932bfed64125ceec2a0d5ffe63f12ac510d60f3eceea8aff5237c6b915422175c3d45464237fda55edc8955fd99926e1471bed1d59f66cb769b52cc9925fb1fa2fe686b9ab349a1b5950f999de4050e42069179e0661cec89cc56c9e2e46e93e44206153cec0f68adb1e22392d281b0832c6c95271909505e37984e7556ab41f96b36fd465025c80125ba885e1f61a0d7faf21308452c83f535864a9559debcdbc904b787454b0a965ba4f9adc9b773dc277c9eee29d2f39935a0ab2e26a56793b74208619997759393d18928142e2aaf61559dbe3eba9409cac9e61d31ede5b2670d81f559cdd4216d19a7bcd7b510acbde9a0a3dc478f1987f2cea1632c0d91c29feae2239c6c38a9b26bb2cb0e307d98767cdd6b56c38b1ef8af9ca5ce762b9276b617b60d47df24290348cdb3b3b9077119ffa021a475d6ec07683c0449dc478dec63a123196cdd0b8c5adb7f3aca80aa0d231bb5f7438da03197981e7c4ec5f6aa16db108b87c2c9d8673096c7e199271e8257eaa16827926d754d06c529f5dbcf9677eb261833f8a2615c5680f40a903e0033136b8ebdd02128164b7942fafbbc2f65e7c92900355f4a418400171906b22ef76627d52466db595b2014be85ee76964ae763e31097a1eee7e1ee93e60138943696949401683529c92145e529d2e0a7b633dc5b8e7b1fed6f2be065a6c1408ac1971a43ea2a9bac548a1fa3158becf801f8346ca0480a820f25938619ffa61739192512bf2b161e024cdf9eef4d27af0b112da92eabd669140128e209af5e81fe9c0c5e252a001e12e3c1e34eb808924afecc3a70e3a259979171931f80eb2c3297dc4ac7cabe08a56c087d8a7e1e2f7ffa8898297d9670ba447f89bfb9d388bf7b15bef43e5b2c9957e30536df7956700d398de17d800717ab1b36e8c7b15f0d3361c17af081c86c6bf97f5c763af159e4d8f09e577e152d148d7fd474ec224c5261857fca2833b8e568522d3e339e3e5013e9b757f9adeb1bb3311b2b158f9fab359b8b6f1cf88a39db49cae35788c9fe97ba5e99c6448b6a0940e74ceb35d44a3911e1d90079bc2c07a97a6e4885c5dc3d65e8e3d85563c866471fb47a06db05917a1d4b66312766c95ac822614faeaebcc8e438533a3c3cfc40e47cfb56699f1af87304b90846f9b39fef9b94a85fd2cd6967dce6d7c333907fdcef6be4d9ca08542d4f950585a5333432fa631eb8aec085fd337d8916d5d990f3f74b797633859790c91a3c3f207001f075d18996074a49d8077718e04d10fa7640df197814731069e8e5bc0b517752c4c52b527216a03edcf75b6d47a7367a29599956a7413856a0cfff0633a96343668e9bb742c7da344f483158ca80d701793bb09b88efc83b8c24cd46a4a035a90ceab18d6ac5c369842dc0695f0b2dd5ea08e39aac258d559a8fb1ec8004bd043ca36c411d9d6339573123520dcc3310a02c9d3ffbfda151ccb43d23857886ec25965ab4fe3ee8a211bf2a5e13060aaf6bf0c697d64342ce3129621c6b72221623d524a19a35faa96382f22824276f6a512016564f6a16b793f3893b61e2d6b60bb9e76ddd1e36a89c37c1a43b292b4d33e9119c27edb18fa113418fc5f664c8de1ba6568aa3eca44367323e4d680279b14ef7d02592557f63d8159a0ca2205fb28ed31a08444ee4041c427d5d8cf496d3bff16dfa5e5168098b0ff0d94014b0f8378909412fe961c43740a95aa323130d4a074b325876de629a74cab0ad860de0e2822098b27da9b91c2bd4e1cfe71e70be39bec0cc973e6a15f62cc5488a8a4c250a3d7f75261bad08a4def11d74817918c5b8938f22d3037f64dc47762e605ed3cacb900fe758a9c662183f38a992073b15ea5023ca74012eb7b487fe5fd592b38990967e0da158076ded8664c319630f0af8fbc347dc72740cbe442bd0e9c899b5ec227cc00f9b6c58ed03c829f67a75c0b2637e8843f40268e91af483e37fa528c04ae4a695c8044d7dbcb2375935c9720ff5a59c5fb8fc7f792800f7f20555f747a2e30bcd5c4abfe8cd9d220d3f1e63bce410987c23a921c81280c1379146ceba0ccad45e9b770416d6b2e118b843b0ff4cc6c77a3aee738fc9cab51388eec3ad528c925ed5d9b35517c1a80c5eb00bfa450bd2d7929ed827366922abe3ac10bbc5610b6435c5834dc3fbc2a3d3d57ba18eb7cbc6eb9c1ed8785460eb0014d008707db3722b34d83f5d1e77a79c0f7f43bb583b638d770d16c874d1b67cc8b880b0239d5ea1d18806cfb5d449ee764e25b613c3983109e3fdf23368ffbcdf5028966f0c9f1d95c60a8a874c711655d9a1e9d3de9cb3d89fde658ab44f8cc53abee15c1099f31e507bef15a3efe4464d0f138da2d7cf2a10a8ffeed85b2e6a7b0c45e04f0fe2ab24a3a0976b59222bbc36b1b99aafb0d58621cba4532db7167c40cb1ac934a3e54d5ce14dddf510b2d2f697ce4a8561ed06da0d4b7bbf245e9a3b93297b0ae16d1cc0e7cc44666280bef93fa7fc0626fb73b00738115a8b31da044e93ffd6f3d51c25a43b00066bd50a0b1a26d904ff45b65c9de8bcbaeb6ceeccd16819900e2c35797bab777e3517600250f74c161c9fff88dce32c588a2e30080628f1e47fa95bfed6bf834264b677795d47520764a7fe5d4f4a30106ee8b3cd9aec3f70a0d5e8d51b76c4e2188287f3a7b942000e82720d70a8e79b54d12179a1c13c785325f0cf071f2ccb8a92af9ae2bbc021c8bac2e87a4eeb36936dd6e38d113efaef2d17a70db2f83b6a396366df8dccc173ef5968df717133f2d817eeb371b9360c09b299f9f59acda377d8dfbf536ebd370cde585165314daa49731ddb4e641289bf5ac39c4494b178966e8fd13f79340760d644c1dfbe59cc59c851dc4b754850e6e", 0x1000, 0x4090, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10)

02:41:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000a000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:06 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:06 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

[ 1581.523853][T13711] binder_transaction: 30 callbacks suppressed
[ 1581.523870][T13711] binder: 13707:13711 transaction failed 29201/-22, size 42949672960--549755813892 line 3147
[ 1581.572910][T13711] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.586759][T13716] binder_alloc: 13707: binder_alloc_buf, no vma
[ 1581.596569][T13711] binder: 13707:13711 ioctl 40046207 0 returned -16
[ 1581.606753][T13716] binder: 13707:13716 transaction failed 29189/-3, size 42949672960--549755813892 line 3147
02:41:07 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:07 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000048000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1581.727417][T13720] binder: 13719:13720 transaction failed 29201/-22, size 309237645312--549755813892 line 3147
[ 1581.763717][T13720] binder: BINDER_SET_CONTEXT_MGR already set
02:41:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000004c000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1581.770422][T13727] binder: 13719:13727 transaction failed 29189/-3, size 309237645312--549755813892 line 3147
[ 1581.781133][T13720] binder: 13719:13720 ioctl 40046207 0 returned -16
02:41:07 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000060000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1581.851469][T13733] binder: 13731:13733 transaction failed 29201/-22, size 326417514496--549755813892 line 3147
[ 1581.871165][T13733] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.877619][T13734] binder: 13731:13734 transaction failed 29189/-3, size 326417514496--549755813892 line 3147
[ 1581.893524][T13733] binder: 13731:13733 ioctl 40046207 0 returned -16
02:41:07 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
lseek(r1, 0x0, 0x4)

[ 1581.984368][T13740] binder: 13738:13740 transaction failed 29201/-22, size 412316860416--549755813892 line 3147
[ 1582.021501][T13741] binder: BINDER_SET_CONTEXT_MGR already set
[ 1582.062421][T13742] binder: 13738:13742 transaction failed 29189/-3, size 412316860416--549755813892 line 3147
[ 1582.124035][T13741] binder: 13738:13741 ioctl 40046207 0 returned -16
02:41:07 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x3, 0x18002)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10011, r0, 0x180000000)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @timestamp, @timestamp, @timestamp, @mss={0x2, 0x3c2e}, @mss={0x2, 0x8000}, @window={0x3, 0x6, 0x5}, @window={0x3, 0x100000001, 0x200}, @timestamp], 0x9)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
openat(r1, &(0x7f0000000040)='./file0\x00', 0x400481, 0x40)

02:41:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000068000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:07 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:07 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1582.458398][T13755] binder: 13753:13755 transaction failed 29201/-22, size 446676598784--549755813892 line 3147
[ 1582.528633][T13762] binder_alloc_mmap_handler: 11 callbacks suppressed
[ 1582.528651][T13762] binder_alloc: binder_alloc_mmap_handler: 13753 20ff9000-20ffd000 already mapped failed -16
02:41:08 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:08 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r1 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r1, 0xc0045c79)
r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

02:41:08 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x7, 0x4)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
accept$nfc_llcp(r1, &(0x7f0000000180), &(0x7f0000000040)=0x60)

[ 1582.609450][T13763] binder: BINDER_SET_CONTEXT_MGR already set
[ 1582.628144][T13763] binder: 13753:13763 ioctl 40046207 0 returned -16
[ 1582.628284][T13762] binder: 13753:13762 transaction failed 29189/-3, size 446676598784--549755813892 line 3147
02:41:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000006c000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1582.778545][T13778] binder_alloc: binder_alloc_mmap_handler: 13776 20ff9000-20ffd000 already mapped failed -16
[ 1582.822568][T13777] binder: BINDER_SET_CONTEXT_MGR already set
[ 1582.857624][T13777] binder: 13776:13777 ioctl 40046207 0 returned -16
02:41:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000074000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1583.022168][T13783] binder_alloc: binder_alloc_mmap_handler: 13781 20ff9000-20ffd000 already mapped failed -16
[ 1583.050557][T13782] binder: BINDER_SET_CONTEXT_MGR already set
02:41:08 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1583.068884][T13782] binder: 13781:13782 ioctl 40046207 0 returned -16
02:41:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000007a000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:08 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000030000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1583.223058][T13791] binder_alloc: binder_alloc_mmap_handler: 13787 20ff9000-20ffd000 already mapped failed -16
[ 1583.235609][T13789] binder: BINDER_SET_CONTEXT_MGR already set
[ 1583.251709][T13789] binder: 13787:13789 ioctl 40046207 0 returned -16
[ 1583.334507][T13797] binder_alloc: binder_alloc_mmap_handler: 13795 20ff9000-20ffd000 already mapped failed -16
[ 1583.367375][T13796] binder: BINDER_SET_CONTEXT_MGR already set
[ 1583.383823][T13796] binder: 13795:13796 ioctl 40046207 0 returned -16
[ 1583.402262][ T9146] binder_release_work: 34 callbacks suppressed
[ 1583.402270][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000050000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1583.430165][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:08 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:09 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1583.514966][T13801] binder_alloc: binder_alloc_mmap_handler: 13799 20ff9000-20ffd000 already mapped failed -16
02:41:09 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000180)={0x6, 0x5, 0x10001, 0x8, 0xa, 0x5, 0x8001, 0x0, 0xffffffffffffffff, 0x10001, 0x68c8, 0x3})
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0xffffffffffffffff}, 0x8})
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), 0x4)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x200, 0x1)

[ 1583.557538][T13800] binder: BINDER_SET_CONTEXT_MGR already set
[ 1583.588156][T13800] binder: 13799:13800 ioctl 40046207 0 returned -16
02:41:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000060000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1583.670225][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1583.678784][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:09 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1583.830635][T13819] binder_alloc: binder_alloc_mmap_handler: 13817 20ff9000-20ffd000 already mapped failed -16
[ 1583.866512][T13818] binder: BINDER_SET_CONTEXT_MGR already set
[ 1583.891797][T13818] binder: 13817:13818 ioctl 40046207 0 returned -16
[ 1583.912420][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1583.919340][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000070000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:09 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1584.036610][T13826] binder_alloc: binder_alloc_mmap_handler: 13824 20ff9000-20ffd000 already mapped failed -16
[ 1584.057767][T13825] binder: BINDER_SET_CONTEXT_MGR already set
[ 1584.071063][T13825] binder: 13824:13825 ioctl 40046207 0 returned -16
02:41:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000000a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1584.095081][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1584.105081][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1584.201051][T13833] binder_alloc: binder_alloc_mmap_handler: 13830 20ff9000-20ffd000 already mapped failed -16
[ 1584.228382][T13832] binder: BINDER_SET_CONTEXT_MGR already set
[ 1584.242043][T13832] binder: 13830:13832 ioctl 40046207 0 returned -16
02:41:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000200000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1584.258397][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1584.267261][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:09 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:09 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000), 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1584.387432][T13838] binder_alloc: binder_alloc_mmap_handler: 13835 20ff9000-20ffd000 already mapped failed -16
[ 1584.410694][T13836] binder: BINDER_SET_CONTEXT_MGR already set
[ 1584.426373][T13836] binder: 13835:13836 ioctl 40046207 0 returned -16
02:41:09 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
write$P9_RSTATFS(r0, &(0x7f0000000340)={0x43, 0x9, 0x2, {0x9, 0x20c9, 0x8, 0xa7, 0x40, 0x0, 0x4, 0x80000000, 0x3}}, 0x43)
r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x800)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000003c0)=""/93)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x6, 0x7})
ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000040))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000480000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:10 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1584.616432][T13854] binder: BINDER_SET_CONTEXT_MGR already set
[ 1584.640221][T13854] binder: 13852:13854 ioctl 40046207 0 returned -16
[ 1584.640256][T13855] binder_alloc_new_buf_locked: 12 callbacks suppressed
[ 1584.640264][T13855] binder_alloc: 13852: binder_alloc_buf, no vma
02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000004c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1584.777994][T13861] binder: BINDER_SET_CONTEXT_MGR already set
[ 1584.794619][T13862] binder_alloc: 13859: binder_alloc_buf, no vma
[ 1584.818041][T13861] binder: 13859:13861 ioctl 40046207 0 returned -16
02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000600000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1584.990996][T13868] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.006727][T13869] binder_alloc: 13867: binder_alloc_buf, no vma
[ 1585.024062][T13868] binder: 13867:13868 ioctl 40046207 0 returned -16
02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000680000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1585.137697][T13872] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.156376][T13873] binder_alloc: 13871: binder_alloc_buf, no vma
[ 1585.169508][T13872] binder: 13871:13872 ioctl 40046207 0 returned -16
02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000006c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:10 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:10 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:10 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000), 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1585.295808][T13876] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.316373][T13877] binder_alloc: 13875: binder_alloc_buf, no vma
[ 1585.368349][T13876] binder: 13875:13876 ioctl 40046207 0 returned -16
02:41:10 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000040)=0x6e)
pipe(&(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:10 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000740000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1585.534936][T13894] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.551456][T13898] binder_alloc: 13893: binder_alloc_buf, no vma
[ 1585.570321][T13894] binder: 13893:13894 ioctl 40046207 0 returned -16
02:41:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000007a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1585.707261][T13903] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.720805][T13904] binder_alloc: 13902: binder_alloc_buf, no vma
[ 1585.727757][T13903] binder: 13902:13903 ioctl 40046207 0 returned -16
02:41:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000001fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1585.898495][T13907] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.925427][T13908] binder_alloc: 13906: binder_alloc_buf, no vma
02:41:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1585.956200][T13907] binder: 13906:13907 ioctl 40046207 0 returned -16
02:41:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000002fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1586.102242][T13913] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.127339][T13914] binder_alloc: 13912: binder_alloc_buf, no vma
02:41:11 executing program 1:
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1586.154585][T13913] binder: 13912:13913 ioctl 40046207 0 returned -16
02:41:11 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000003fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1586.313826][T13928] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.335432][T13930] binder_alloc: 13923: binder_alloc_buf, no vma
[ 1586.349469][T13928] binder: 13923:13928 ioctl 40046207 0 returned -16
02:41:11 executing program 5:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="cfafe12eda21799706df506ce312e319522f8ba26e7c216615a8dc87b5e3bdcc05fbab45e79204e5f2748fd351c74ffeae50af8327f19c60a41bb9317f885a0eaa810e8ab09d0aefaa976da49a483d948b3660c155dd96aab5c6fb7fef6f8ee5e40589a6ed688c96e3a11c7491ebc41ac6a47ec0bc389352af5f1116cb19a9", 0x7f, 0xfffffffffffffffb)
r3 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$search(0xa, r2, &(0x7f00000004c0)='logon\x00', &(0x7f0000000500)={'syz', 0x3}, r3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={<r4=>0x0}, &(0x7f0000000680)=0xc)
ptrace$setsig(0x4203, r4, 0x101, &(0x7f00000006c0)={0x3f, 0x9, 0x6})
r5 = shmget(0x0, 0x1000, 0x1010, &(0x7f0000fff000/0x1000)=nil)
shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000740)=""/4096)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff}, 0x106, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f00000001c0), 0x0, r6, 0x3c, 0x1, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x21}, 0x3b49}}}, 0xa0)
ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x3)
symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00')
add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000280)=0x11, 0x4)

02:41:11 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000), 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000004fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:11 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1586.487153][T13942] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.515981][T13942] binder: 13940:13942 ioctl 40046207 0 returned -16
02:41:12 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
clock_gettime(0x2, &(0x7f0000000040))
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000005fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1586.672114][T13954] binder_transaction: 40 callbacks suppressed
[ 1586.672133][T13954] binder: 13952:13954 transaction failed 29201/-22, size 360287970189639680--549755813892 line 3147
[ 1586.710507][T13954] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.722746][T13958] binder: 13952:13958 transaction failed 29189/-3, size 360287970189639680--549755813892 line 3147
[ 1586.736935][T13954] binder: 13952:13954 ioctl 40046207 0 returned -16
02:41:12 executing program 1:
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:12 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000006fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1587.078913][T13968] binder: 13967:13968 transaction failed 29201/-22, size 432345564227567616--549755813892 line 3147
[ 1587.121570][T13968] binder: BINDER_SET_CONTEXT_MGR already set
[ 1587.148221][T13971] binder: 13967:13971 transaction failed 29189/-3, size 432345564227567616--549755813892 line 3147
[ 1587.203308][T13968] binder: 13967:13968 ioctl 40046207 0 returned -16
02:41:12 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000007fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:12 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1587.396572][T13978] binder: 13976:13978 transaction failed 29201/-22, size 504403158265495552--549755813892 line 3147
[ 1587.428599][T13978] binder: BINDER_SET_CONTEXT_MGR already set
02:41:12 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:12 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1587.464639][T13979] binder: 13976:13979 transaction failed 29189/-3, size 504403158265495552--549755813892 line 3147
[ 1587.489329][T13978] binder: 13976:13978 ioctl 40046207 0 returned -16
02:41:13 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x5e, 0x2, 0x9, "ca0ed252146c0c6db05b3d3a0aca4096", "39e584cc7f4e108c5bb11855a5c1d0709b2c812d5434fcf5de22235d1826f671b1ba6e572c24852c1488c7e17036098d87a6970348aef971d9a0c5725d2f562761bd7ae506ce6eb538"}, 0x5e, 0x2)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r2, 0x7}}, 0x10)

02:41:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000000afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:13 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1587.632558][T13994] binder: 13992:13994 transaction failed 29201/-22, size 720575940379279360--549755813892 line 3147
[ 1587.709818][T14000] binder_alloc_mmap_handler: 14 callbacks suppressed
[ 1587.709849][T14000] binder_alloc: binder_alloc_mmap_handler: 13992 20ff9000-20ffd000 already mapped failed -16
02:41:13 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1587.753013][T13994] binder: BINDER_SET_CONTEXT_MGR already set
[ 1587.766247][T13994] binder: 13992:13994 ioctl 40046207 0 returned -16
[ 1587.779138][T14000] binder: 13992:14000 transaction failed 29189/-3, size 720575940379279360--549755813892 line 3147
02:41:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000020fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:13 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1587.956592][T14012] binder: 14011:14012 transaction failed 29201/-22, size 2305843009213693952--549755813892 line 3147
[ 1587.997996][T14015] binder_alloc: binder_alloc_mmap_handler: 14011 20ff9000-20ffd000 already mapped failed -16
[ 1588.018545][T14015] binder: BINDER_SET_CONTEXT_MGR already set
[ 1588.025234][T14016] binder: 14011:14016 transaction failed 29189/-3, size 2305843009213693952--549755813892 line 3147
02:41:13 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1588.049593][T14015] binder: 14011:14015 ioctl 40046207 0 returned -16
02:41:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000048fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:13 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:13 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1588.254516][T14025] binder_alloc: binder_alloc_mmap_handler: 14022 20ff9000-20ffd000 already mapped failed -16
[ 1588.320024][T14023] binder: BINDER_SET_CONTEXT_MGR already set
[ 1588.354037][T14023] binder: 14022:14023 ioctl 40046207 0 returned -16
02:41:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000004cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:13 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:14 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=<r2=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:14 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1588.527993][T14040] binder_alloc: binder_alloc_mmap_handler: 14036 20ff9000-20ffd000 already mapped failed -16
[ 1588.568760][T14039] binder: BINDER_SET_CONTEXT_MGR already set
[ 1588.575445][T14039] binder: 14036:14039 ioctl 40046207 0 returned -16
[ 1588.606343][ T8436] binder_release_work: 36 callbacks suppressed
[ 1588.606350][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000060fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1588.651866][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:14 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:14 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fremovexattr(r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:14 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1588.727870][T14053] binder_alloc: binder_alloc_mmap_handler: 14051 20ff9000-20ffd000 already mapped failed -16
[ 1588.745397][T14052] binder: BINDER_SET_CONTEXT_MGR already set
[ 1588.787942][T14052] binder: 14051:14052 ioctl 40046207 0 returned -16
[ 1588.822640][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:14 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1588.833665][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000068fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:14 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:14 executing program 0:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1588.947777][T14069] binder_alloc: binder_alloc_mmap_handler: 14064 20ff9000-20ffd000 already mapped failed -16
02:41:14 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1589.008883][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1589.009912][T14072] binder: BINDER_SET_CONTEXT_MGR already set
[ 1589.036505][T14072] binder: 14064:14072 ioctl 40046207 0 returned -16
[ 1589.036535][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000006cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1589.179007][T14083] binder_alloc: binder_alloc_mmap_handler: 14081 20ff9000-20ffd000 already mapped failed -16
[ 1589.202557][T14082] binder: BINDER_SET_CONTEXT_MGR already set
[ 1589.208781][T14082] binder: 14081:14082 ioctl 40046207 0 returned -16
[ 1589.226719][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1589.234244][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:14 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0xfffffffffffffffc)
epoll_create1(0x0)
ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040))
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:14 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140), 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:14 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000074fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:14 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:14 executing program 0:
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1589.484569][T14099] binder_alloc: binder_alloc_mmap_handler: 14093 20ff9000-20ffd000 already mapped failed -16
[ 1589.518130][T14098] binder: BINDER_SET_CONTEXT_MGR already set
02:41:15 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140), 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1589.546412][T14098] binder: 14093:14098 ioctl 40046207 0 returned -16
[ 1589.573133][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1589.582900][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:15 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000007afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:15 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, &(0x7f0000000140)={0x1b7, 0x8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:15 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140), 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1589.785818][T14120] binder_alloc: binder_alloc_mmap_handler: 14115 20ff9000-20ffd000 already mapped failed -16
[ 1589.830586][T14118] binder: BINDER_SET_CONTEXT_MGR already set
[ 1589.848447][T14118] binder: 14115:14118 ioctl 40046207 0 returned -16
02:41:15 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1589.898546][T14125] binder_alloc_new_buf_locked: 11 callbacks suppressed
[ 1589.898554][T14125] binder_alloc: 14115: binder_alloc_buf, no vma
02:41:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000fffffdfdfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1590.116041][T14134] binder_alloc: binder_alloc_mmap_handler: 14131 20ff9000-20ffd000 already mapped failed -16
[ 1590.147900][T14133] binder: BINDER_SET_CONTEXT_MGR already set
02:41:15 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 0:
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000fdfdfffffcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1590.168782][T14133] binder: 14131:14133 ioctl 40046207 0 returned -16
[ 1590.186017][T14134] binder_alloc: 14131: binder_alloc_buf, no vma
02:41:15 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1590.336180][T14149] binder: BINDER_SET_CONTEXT_MGR already set
[ 1590.346059][T14152] binder_alloc: 14147: binder_alloc_buf, no vma
[ 1590.359353][T14149] binder: 14147:14149 ioctl 40046207 0 returned -16
02:41:16 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x80002)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000020000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1590.653265][T14165] binder: BINDER_SET_CONTEXT_MGR already set
[ 1590.674639][T14166] binder_alloc: 14163: binder_alloc_buf, no vma
[ 1590.693807][T14165] binder: 14163:14165 ioctl 40046207 0 returned -16
02:41:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000030000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:16 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = socket(0x7, 0x4, 0x7)
connect$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f00000002c0), &(0x7f0000000380)=<r5=>0x0, &(0x7f00000003c0))
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
getgroups(0x3, &(0x7f0000000540)=[0xee00, <r8=>0xee01, 0x0])
r9 = getegid()
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, <r10=>0x0}, &(0x7f00000005c0)=0xc)
fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setsockopt$inet_dccp_buf(r2, 0x21, 0x0, &(0x7f00000006c0)="d2783d0fea70d95ff580cdf1e651b0c3175d38ec68b0416487aa7145d4653994bc6431c3193f92f1903f925ab107ee613f1c8be06fc815e3f179bfee08e99562d120b39a8c17d724f08ca4a11965ac3c648c335a5120aa01c1de8431ea3311f70fe302583861e95664533dc0241b59dff5e979522b2441d02acbe3e817edfb28c6c4354851ee2d58744c31991d922aedce9e9c11077608a966ef37d5d59d26116636a100dc4342c63eea38675c6458448c34509df3b0c357fd144ec7", 0xbc)
getgroups(0x9, &(0x7f0000000680)=[r3, r4, r5, r6, r7, r8, r9, r10, r11])
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x81}, 0x4)

[ 1590.861176][T14175] binder: BINDER_SET_CONTEXT_MGR already set
[ 1590.898966][T14176] binder_alloc: 14173: binder_alloc_buf, no vma
[ 1590.934990][T14175] binder: 14173:14175 ioctl 40046207 0 returned -16
02:41:16 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, 0x0, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:16 executing program 0:
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000040000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:16 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1591.158781][T14192] binder_alloc: 14188: binder_alloc_buf, no vma
[ 1591.196997][T14189] binder: BINDER_SET_CONTEXT_MGR already set
02:41:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1591.209981][T14189] binder: 14188:14189 ioctl 40046207 0 returned -16
02:41:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000050000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:16 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1591.362624][T14204] binder: BINDER_SET_CONTEXT_MGR already set
[ 1591.404784][T14206] binder_alloc: 14203: binder_alloc_buf, no vma
[ 1591.429397][T14204] binder: 14203:14204 ioctl 40046207 0 returned -16
02:41:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000060000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1591.590492][T14213] binder: BINDER_SET_CONTEXT_MGR already set
[ 1591.604919][T14214] binder_alloc: 14212: binder_alloc_buf, no vma
[ 1591.643589][T14213] binder: 14212:14213 ioctl 40046207 0 returned -16
[ 1591.684978][T14214] binder_transaction: 27 callbacks suppressed
[ 1591.684997][T14214] binder: 14212:14214 transaction failed 29189/-3, size 6597069766656--549755813892 line 3147
02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:17 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0xb03d, 0x84000)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:17 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:17 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:17 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000070000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:17 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x10000, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180))
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1592.106628][T14243] binder: 14240:14243 transaction failed 29201/-22, size 7696581394432--549755813892 line 3147
[ 1592.144797][T14250] binder: BINDER_SET_CONTEXT_MGR already set
[ 1592.163854][T14251] binder_alloc: 14240: binder_alloc_buf, no vma
02:41:17 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(0x0, 0x4, 0x0)
recvfrom(r0, &(0x7f0000000180)=""/3, 0x3, 0x20, &(0x7f00000001c0)=@nl, 0x80)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x101000, 0x0)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0)
epoll_create1(0x0)
ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000008000000000000000000000050000000000000000020000000000009e4000000000000000e000000000000000030010000000000001000000000000"])
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x0, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1592.208250][T14250] binder: 14240:14250 ioctl 40046207 0 returned -16
[ 1592.214236][T14251] binder: 14240:14251 transaction failed 29189/-3, size 7696581394432--549755813892 line 3147
02:41:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000000a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1592.451711][T14265] binder: 14263:14265 transaction failed 29201/-22, size 10995116277760--549755813892 line 3147
02:41:17 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1592.546260][T14265] binder: BINDER_SET_CONTEXT_MGR already set
[ 1592.558615][T14268] binder_alloc: 14263: binder_alloc_buf, no vma
[ 1592.592508][T14265] binder: 14263:14265 ioctl 40046207 0 returned -16
[ 1592.606473][T14268] binder: 14263:14268 transaction failed 29189/-3, size 10995116277760--549755813892 line 3147
02:41:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000480000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1592.710684][T14275] binder: 14274:14275 transaction failed 29201/-22, size 79164837199872--549755813892 line 3147
[ 1592.763509][T14277] binder_alloc_mmap_handler: 8 callbacks suppressed
[ 1592.763526][T14277] binder_alloc: binder_alloc_mmap_handler: 14274 20ff9000-20ffd000 already mapped failed -16
[ 1592.802815][T14275] binder: BINDER_SET_CONTEXT_MGR already set
[ 1592.808972][T14275] binder: 14274:14275 ioctl 40046207 0 returned -16
[ 1592.816211][T14277] binder: 14274:14277 transaction failed 29189/-3, size 79164837199872--549755813892 line 3147
02:41:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000004c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:18 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:18 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:18 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1592.983860][T14285] binder: 14280:14285 transaction failed 29201/-22, size 83562883710976--549755813892 line 3147
02:41:18 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:18 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
recvmmsg(r0, &(0x7f0000005b80)=[{{&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/85, 0x55}, {&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000280)=""/106, 0x6a}], 0x3}, 0x5ef}, {{&(0x7f0000000380)=@pppol2tpv3, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000400)=""/20, 0x14}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f0000000600)=""/179, 0xb3}], 0x5, &(0x7f0000000740)=""/72, 0x48}, 0x7}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/178, 0xb2}, {&(0x7f0000001900)=""/216, 0xd8}, {&(0x7f0000001a00)=""/120, 0x78}], 0x4, &(0x7f0000001ac0)=""/213, 0xd5}, 0xffff}, {{&(0x7f0000001bc0)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000001c40)=""/217, 0xd9}, {&(0x7f0000001d40)=""/54, 0x36}, {&(0x7f0000001d80)=""/174, 0xae}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/25, 0x19}, {&(0x7f0000002e80)=""/199, 0xc7}, {&(0x7f0000002f80)=""/195, 0xc3}], 0x7, &(0x7f0000003100)=""/12, 0xc}}, {{&(0x7f0000003140)=@nfc, 0x80, &(0x7f00000032c0)=[{&(0x7f00000031c0)=""/113, 0x71}, {&(0x7f0000003240)=""/11, 0xb}, {&(0x7f0000003280)=""/31, 0x1f}], 0x3, &(0x7f0000003300)=""/140, 0x8c}, 0x7}, {{&(0x7f00000033c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000004440)=""/231, 0xe7}, {&(0x7f0000004540)=""/127, 0x7f}, {&(0x7f00000045c0)=""/125, 0x7d}, {&(0x7f0000004640)=""/126, 0x7e}, {&(0x7f00000046c0)=""/4096, 0x1000}, {&(0x7f00000056c0)=""/109, 0x6d}], 0x7, &(0x7f00000057c0)=""/201, 0xc9}, 0x7f}, {{0x0, 0x0, &(0x7f0000005b40)=[{&(0x7f00000058c0)=""/167, 0xa7}, {&(0x7f0000005980)=""/202, 0xca}, {&(0x7f0000005a80)=""/3, 0x3}, {&(0x7f0000005ac0)=""/101, 0x65}], 0x4}, 0x80000000}], 0x7, 0x20, &(0x7f0000005d40)={0x0, 0x1c9c380})
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))

02:41:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1593.042542][T14288] binder_alloc: binder_alloc_mmap_handler: 14280 20ff9000-20ffd000 already mapped failed -16
[ 1593.047817][T14285] binder: BINDER_SET_CONTEXT_MGR already set
[ 1593.069909][T14285] binder: 14280:14285 ioctl 40046207 0 returned -16
02:41:18 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:18 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1593.169528][T14302] binder: 14280:14302 transaction failed 29189/-3, size 83562883710976--549755813892 line 3147
02:41:18 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r0 = pkey_alloc(0x0, 0x0)
pkey_free(r0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000040))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000600000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:18 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:18 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1593.380403][T14319] binder: 14318:14319 transaction failed 29201/-22, size 105553116266496--549755813892 line 3147
[ 1593.421384][T14324] binder_alloc: binder_alloc_mmap_handler: 14318 20ff9000-20ffd000 already mapped failed -16
[ 1593.440227][T14319] binder: BINDER_SET_CONTEXT_MGR already set
[ 1593.446723][T14319] binder: 14318:14319 ioctl 40046207 0 returned -16
02:41:19 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000680000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:19 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:19 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1593.601099][T14329] binder_alloc: binder_alloc_mmap_handler: 14327 20ff9000-20ffd000 already mapped failed -16
[ 1593.636046][T14328] binder: BINDER_SET_CONTEXT_MGR already set
02:41:19 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1593.649382][T14328] binder: 14327:14328 ioctl 40046207 0 returned -16
[ 1593.649647][ T9146] binder_release_work: 26 callbacks suppressed
[ 1593.649654][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1593.701665][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:19 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:19 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000006c0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1594.046206][T14347] binder_alloc: binder_alloc_mmap_handler: 14343 20ff9000-20ffd000 already mapped failed -16
[ 1594.073678][T14345] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.080543][T14345] binder: 14343:14345 ioctl 40046207 0 returned -16
[ 1594.085192][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1594.094815][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:19 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000040)={0x94d, <r2=>0x0, 0x1, 0x5})
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000100)={0x1, r2})
recvfrom$netrom(r0, &(0x7f0000002980)=""/215, 0xd7, 0x40010000, &(0x7f0000002a80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48)
r3 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r4 = epoll_create1(0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000002c40)={0x2, 0x2, 0x7, 0x0, 0x5})
sendmmsg(r0, &(0x7f0000002940)=[{{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x1, 0x1, 0x2, {0xa, 0x4e21, 0xffffffffffffffff, @dev={0xfe, 0x80, [], 0x13}, 0x7ff}}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000000200)="e3e7537cac86bd11d673fb3246d7979e0ab0b3402030514bdd873c44f86ce9ffb72d020bb47a74cdd6abce3113a89878549845a84f6448fecb6df11e924c17f386c8f538102e670a3a687a4327af72359459436df2ddfd8aa4452b7a04c89a04d4ab72e9ca82ec7ca76a4dfde2ad0c1ec5ee7cd314948d538e8f5b1dc3b612e5a4f446a9c81d9cee05da552bb4bbeb2698cca1b286ee14bd86643a8ee1669c6e5e15332c92c3848f28d2b3cd07d6a63596a8780b1c52422a59a7e488e18672538e145bc8846d3bbfe4ddda353920867dc897595e89ba9297e2df5c296f15a1dad52b5f751b815e0ea6", 0xe9}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="ac59c85817bbad05a8ef822065ab711b202ead997eb1820990a3352a8abc20836f0ee797dfdc19e4b0bd2ec2856cbf8cef64251f88202359bfb1f3dbea7d539b73409818fbae07d80fa5a4636a4868e415c5", 0x52}, {&(0x7f0000001400)="cb92859044c3a7cd261152a865da59e09b435c7e01ef2e8e5b29650dd93c58e73514ea22016f736f37edcc483e03cc0f024d06e05f1349a780cb3de224895ef9715bc4c66e45ff0e5b186a2228a057b0caede1405a7a560382ddef4777", 0xff67}, {&(0x7f0000001480)}, {&(0x7f00000014c0)="1fb4ce5c90418ff7afcc599c9f6cbd102caf52ae01f6a8fc69bb0ac82ccbbe6be85469635f2690c3dbe3ad276175829c", 0x30}, {&(0x7f0000001500)="dfa559bc8bb36d7223e734eb08fe7c52d6e54dd3120142006a73d812f6e71854ce53cc357a6f4241e97c1d9801316564d81e4e9172df28f8b4bec452f9267f27993468f5890b2f4b041871b3cbce8350", 0x50}, {&(0x7f0000001580)="c463f329000c1f472853678994714703d52d9fed5821fca16caa2f6963ddc5a74fd2ea07d71f49c0e467ea16b7b517957839279f9afe8daa0e98c2620c8cead0b39d1a71643143af3c7517181358a9350c3a4cf00f0a3a9ed544dc1f41b64b401b2ce7798b03639b23df556d2892815df8076e56979d3ff00fe0ac58c92b2a7aa3eef05cb6a6932c7d6e282a6e6f67d63779daadb1c3626e5e5f02542c2f43da8fee27559628ca8cc8a6da33b7951f4e3d063a6969fb3f649eb556c9709bc531f34683d2bff8d2d1598654b0c535b532cdb4ebb7429f17bccac40734ea21eb7ce058fddde552f5dc7d287faa6a55063666", 0xf1}, {&(0x7f0000001680)="86716da708248d2e59d54c4c098bbe827ebc3094a6c7227a8bb0a6cd1c8eb2e431e8dc33c83166e02bb3ffe2568187674570ddaaa7149ab289c88936c36f0097a155d0cbc9740a1f4141713819e7470f367adaa78ebf55f12591f8aa5da2014091ed516709fc260af4fdd6fcd0807ae4080ab94177e5e98182abfeb32431f2ae47e8cef520b3241915f6b893afa16d49af7839824d8de29b87588654e0b0c82db59ddc", 0xa3}, {&(0x7f0000001740)="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", 0x1000}], 0xa, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x128}, 0x100000000}], 0x1, 0x804)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000002b40)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002b00)={<r5=>0xffffffffffffffff}, 0x2, 0x7}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000002b80)={0x16, 0x98, 0xfa00, {&(0x7f0000001480), 0x0, r5, 0x3c, 0x1, @in={0x2, 0x4e23, @multicast2}}}, 0xa0)
pipe(&(0x7f0000000340)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000002cc0)=<r8=>0x0)
ptrace(0x421f, r8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e)

02:41:19 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:19 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:19 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000740000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1594.180051][T14362] binder_alloc: binder_alloc_mmap_handler: 14358 20ff9000-20ffd000 already mapped failed -16
02:41:19 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1594.224781][T14359] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.236998][T14359] binder: 14358:14359 ioctl 40046207 0 returned -16
[ 1594.258515][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1594.267977][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000007a0000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:19 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1594.377223][T14375] binder_alloc: binder_alloc_mmap_handler: 14373 20ff9000-20ffd000 already mapped failed -16
[ 1594.409576][T14374] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.417157][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000300fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1594.425312][T14374] binder: 14373:14374 ioctl 40046207 0 returned -16
[ 1594.432209][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1594.526909][T14381] binder_alloc: binder_alloc_mmap_handler: 14379 20ff9000-20ffd000 already mapped failed -16
[ 1594.557046][T14381] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.573986][T14381] binder: 14379:14381 ioctl 40046207 0 returned -16
[ 1594.575421][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1594.592750][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:20 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

02:41:20 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000500fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1594.900620][T14389] binder_alloc: binder_alloc_mmap_handler: 14385 20ff9000-20ffd000 already mapped failed -16
[ 1594.919142][T14387] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.941781][T14387] binder: 14385:14387 ioctl 40046207 0 returned -16
[ 1594.952804][T14389] binder_alloc_new_buf_locked: 8 callbacks suppressed
[ 1594.952812][T14389] binder_alloc: 14385: binder_alloc_buf, no vma
02:41:20 executing program 5:
socket$isdn(0x22, 0x3, 0xfa44c4aeee5850b3)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x17)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f0000000040), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

02:41:20 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:20 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000600fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1595.112836][T14404] binder_alloc: binder_alloc_mmap_handler: 14399 20ff9000-20ffd000 already mapped failed -16
[ 1595.157526][T14401] binder: BINDER_SET_CONTEXT_MGR already set
[ 1595.168448][T14401] binder: 14399:14401 ioctl 40046207 0 returned -16
[ 1595.250788][T14409] binder_alloc: 14399: binder_alloc_buf, no vma
02:41:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000700fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1595.400658][T14412] binder: BINDER_SET_CONTEXT_MGR already set
[ 1595.406692][T14412] binder: 14411:14412 ioctl 40046207 0 returned -16
[ 1595.449461][T14413] binder_alloc: 14411: binder_alloc_buf, no vma
02:41:20 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:21 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1595.642075][T14423] binder: BINDER_SET_CONTEXT_MGR already set
[ 1595.656502][T14424] binder_alloc: 14420: binder_alloc_buf, no vma
[ 1595.676996][T14423] binder: 14420:14423 ioctl 40046207 0 returned -16
02:41:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000002000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:21 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

02:41:21 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1595.872082][T14431] binder: BINDER_SET_CONTEXT_MGR already set
[ 1595.882795][T14432] binder_alloc: 14429: binder_alloc_buf, no vma
[ 1595.893259][T14431] binder: 14429:14431 ioctl 40046207 0 returned -16
02:41:21 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@local, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8)

[ 1596.047607][T14441] binder_alloc: 14438: binder_alloc_buf, no vma
[ 1596.082830][T14439] binder: BINDER_SET_CONTEXT_MGR already set
[ 1596.128801][T14439] binder: 14438:14439 ioctl 40046207 0 returned -16
02:41:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:21 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:21 executing program 3:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1596.298769][T14449] binder: BINDER_SET_CONTEXT_MGR already set
[ 1596.313552][T14451] binder_alloc: 14448: binder_alloc_buf, no vma
[ 1596.354294][T14449] binder: 14448:14449 ioctl 40046207 0 returned -16
02:41:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1596.493586][T14460] binder: BINDER_SET_CONTEXT_MGR already set
[ 1596.506954][T14461] binder_alloc: 14459: binder_alloc_buf, no vma
[ 1596.520738][T14460] binder: 14459:14460 ioctl 40046207 0 returned -16
02:41:22 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1596.641749][T14464] binder: BINDER_SET_CONTEXT_MGR already set
[ 1596.668823][T14465] binder_alloc: 14463: binder_alloc_buf, no vma
02:41:22 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1596.696431][T14464] binder: 14463:14464 ioctl 40046207 0 returned -16
[ 1596.741844][T14465] binder_transaction: 28 callbacks suppressed
[ 1596.741863][T14465] binder: 14463:14465 transaction failed 29189/-3, size 29273397577908224--549755813892 line 3147
02:41:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:22 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000180))
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040)="f41fcedb4d2e1a33d108a72b59d1c7d0c14ba3d79ac6ad414ab80c3c899956cbedfc7d3b60679539696b8564921bde", &(0x7f0000000380)="aaed579a9ba660e9bfef640755aef68a6f2db7a15c54f864a31d884bde52856f8e19a700fc98830d4fff68c64d58902858731232bb8291f5f74106b4f2f1870fe0c93ae307172e7154251463261463ec090e55cceae2d2def46e928198ef30d2ca7232bc2e424ea16f4405e03b3ff7e565215fab506f23a39c849905acaa74f747225fe421910bdb4e1e84c6aa2665e460a4d4bcd25040cd83acf0f60c089f59bbfd908ed61e61d9d6f627f17d8ad20c2e2b13b5e248e34c3216a372ceac603667d8678293c0344485d35953b185f4aecc0fed551c4e86c4ab4509250757e278caeb5dd0335b87c3bacf7b2dbbddd547f8b2955b879e9ae80355483c0e1ad3964b1112b7ff2ac9563a70b3062fd959698663710f7ee3941b09fb429a9c8bd845e68450e6050b8ed77178fba50ddce1ae7cc8c4def726b656b1a1f6d2701bbe6bfe3ade908901e5065f7bf4d0da0c4df7947aedddbd342e74d67393efc9e361499558cb1145d20efedc307c1e77e6f2f45e89b586d944e62df33e858678cf316ff509cf0fd003b89bfab83f4703c7aa885e91b1d5d54882629c402c81494de1dc8e790a9be14bc760bf8e13f1c0502e9bd9b87d8c5402f6a9174c020f610b266d8c8c39f2f43f34b11739018ec034b0968659c33ff7c40ba97731e596c49800c9fdb62d2017cb2138f1b645d4bef7c46f9024566e25e779a267d63c27337f3d82f1e650b085165f9a076fa99d2dc9ba904de62f13be284b9a68abcc2a056468a1dc3fa2160465d667682308a9c990aaa62133b26b19d6143502ca49c276cf278586168f711f41dfc3933b3a4d9e5e173ba65fa173c9f36c6b6bf197d23fc5ebf8e5ec1489831d1eed643a7ae99ec06ed1774cf928663e37b11b647c5a71fc56800d068ab11f5d51352c5c05d3df09f88ae3083c8a9161f9b0dc016d31398ad78b519874b9ed04bad788b0a45296ac39eaebe345f57db42abcce510face1f023f90e0c75accfa3a366ed1c2d3e4f59f08b8eeb38896218e3d135b13eae39342cf7b9e63de5d102a05ac7fbf88fbd297c616dd273ff705899a4e4e1ad51dd5e51806c21b22d8c86c14f998ec8b9b2068c6bad059c32f9696291b0abe178498e002169b569c3d3f36cd16ec2ff7db0fa1334b1c994bf648a2a81ac71480f01ac0875917f04e6c6a099ce057ef804a04c1620371c711710b92ae218dc77496771f5634db917a19e9349a7db1ef7c6ac992e715c57fb936d173928e9a6d5167576065556c732ff34f416a92917098a3652abd249d1e481d8d5b402d7222e75ee9e74f6c4c198c68c7768582cd1d1473d86826c053f7631ee1b79904b1ba06e36f7f6ce42b7f58bc88bb206ed4a708693d3e48283c3924ef0b5d097a573a3a50d81c8e6945dfb088d1ab3de8a75f94275e4bd8b886abb132e53653c9bf37d41dc9e060ada786d544a38b95832f8d36da20cf92a38eaad062f832fd89c9b9e2ac4d87318f8e6f890722e1a7acbb239a1adf924867b2df56088df9de4025358c315b1c310eadee9ac8b86c31b38f2460707c51c9999e8ed29ce404301a541a62b84ddce080788ccf72d6f533151c179a5122102424a7cccd5c9e92db252a749fd2b143b0ab1ff6d00f8437fa14cf1509ea6201c278808334cd5482a187473d980595ed731e9d94304c3b798473e126fccd405d91a56663462b9f8e2d44ac3a4100d297f68581ac9fa4f0d08ddcbc5053e2ea4c96d1a3cdf5bc9003dce6a6aa4e182e954f2890d75b2ac42ebfcf3aa4682ae050babeed0e88d6a87cb90dff8a632cc4d700e24fd24a817e82beded3f4613ee1689f1ee1f6deb0875f587aa42a5b45dc5060836ae967daad3ea1cf5c9daee83b563010430705aa855ff502c0a6073d6d9f1de6cb913c663283965e0fbe316ed911231e35dde5a05242aa8fde5442465594688ba4b157ab08f8fdc906efa583210497c0da3bac561900104dc333ac23413436cf8b340a0c936ba9c745225faf83e48ecd446bed28b22c52b139401514baf95ada68deffaec6f1730966c7879cc707e0f4e5af054bdee99b023b65bd73ec96826d36d08d2f5039fbef3428950aa3c9adbc054ad36128935f284a0dc7ab434f91f354d3b1350dfa967e574f4db342ebc9ec46d8f4d886045c21f2120342023fcd06c87967404d3dff761b040e4b94fb9754e9a2f12c3907976098ead7c0be4e4cba8e3aa3676bb7be2d21bc83888414889ccc9fc87327a6a8f90986ee86f4c9cf85fff38fe755c338ac5254cd65893657a4928cc411ac865d4595d3cc0b4f39ceda951b12992be7d5da0d053e6305f847f72685245fedf682b782f98bf31a528426306332df47c0bccb616d5e7bc5899bf99ee14c87f671abdefcd153babbb4f32cbbef34a584e3efe1e599c091767482e9693b6be3a3070bd713d98fc579a7886971b521dc31120eb729d5b6ef9410cb3a3a043d1bc23b5f2663c40b565e5464cdb2e54a67a912a81e4d43f839ad05b82286899115c7bf81ddabef44d3a0b5fa5770772520420a783d48eeef43afa3e5237a1e9506ce7a72aba05c14d0d38b8128f17957e1fcc6e443c0fccdc21d551ff08883f7436b489e54d77fc4b22dd34d196427ca8c91d765d3ad61b1ded7bf78ac8478ca38540ec13826c571923c8a289776dd1e42a46b653149f712ad63de58a0c173cba9e8846289f4685b0ac3767bb2d08e5fc18e8fc5ef5531d1b7594a72d72d360dc82f3cc37d6168aacc1ad370678acb477f1b9ccfab9d2e303cdbeed3290aa18f86f83f63be4627d01635df0027aab0e674dca0d012b6c95ca0da117862952e1b3aec415fc1fac6090813dad0466e3400d0877bf2a448b3738f4aed11b939900dfc83fbd3e16e6268a322f7e020f1863868073ab8f895338c0bdb91bae00685b30419ed1cb3930662cbea32112bf3f74df530ca59a6d44566b89a81479663d4ea70854bff2e4188980101bf4864d439c8f53df1b6f5941533079de7bf83f258f04090edf957f5b0b3c40ea4b64115fbb917665374ec3c2501069dd3df024a67f9575a3bcc0e1c11c7c0ebb098e6eb74eb375196a1943677e0ef2f4c034842a90177782788df7633b8d67118d062cabd2d538b67e925d23ece23f2628802f45eecf40568d2558f59298f669ab968442d3abb7ece0970c3749ae60e7dc626accf00c47b6f68630c32cc66f36e37a8c5d7fd52fb991cb13f4941ce91bfc46f37bacc0742235aff85ac6e3f443e19dd986e4592e073ddc97b2ef3df27a5e1496c6d69eb7f1311ccc21508f5b363fb2c952851f4161894468959e5f6dca56c5b20311300309ff0bd7adfabb50d0f5efa7bae3c83932d5a3c7239c24516c9d1defe654f80a4bfcf62e4e8f8e3cd984f300b1789424b091b4246d5045367f3d8306fbb028781d8ff254840f5e4921efcd08b9259e61e3e7f9cfae9d3d5160bb1217ad2b8467ffffb89140b3a0ec26c6577601d35934ede0b263128129085f9c564db94e571525c900feb43c0faae2b09fed00291815f7aaa2c5ca2069d6dcf4b8aec0fc7233fd1580dd92e8f5e5c8a20a6b4fc909f44414ebda4edfa25b1663554eed3902c8fcf168e29da155ca202274f3a8f39d79401dee82dc5d93a1e1767147f17e53dc2442213e15b4539be27dd8c0a42d2468c4f25c8961ec5d3072bd6805aa0634e4575ea9f1c8251f9c1acfbda8f31019a8c23444970fe6ee6a22eb8889a89aac07f770ec89edaece54d06fad35526dd56cb5da8649660f4d475787845b5ce1b932f67ccbe48a990ee95891fdc37adb04351eb8fc37aaf099065d9a550a56612df320d5cb11592eae5846e60855b33d7e64826e59f9e4702c7f681f057d0505dc6714835f0e6e4ec21454c4aeb5094ac5bd4d738dc34fc5a5ece8d3d4466c959ebbd2b78c63e1462f24e06b636ffc74718c9e1758e85ca1daeaa6fc2734fb67418c6dd10b4f15db47b3e91d8f0120c272b8478e4e8bce80e07cf2a051b9e17734f3066676e4157454fd4d78fab31b9d3540bdbc4f5987c3153a7845e8a5b1b175da5f4b2320b5285b9414ed4ac6847f35ee7623719e85e50e3b9861c23855b3843cde722c9f5ef2da324bc0c40e6d01c8b345d3089e792ba049b2e405740bf024c69ed2a7a899f66a83870a50d7e17b231abc3ae46083e906d9401d4300d4abde0d342a90aa31664169fc4d4110ed1e9b60c9c49defad7d801bf663d5efaaac47ca61789ca78872ad06035b1fb6f69a2a8cf9c9a7cd5eb4854151d8caaa6532c3e24c40c812d2ad0ec6dcb6db8e6c0af782a3cc863a011e988fdff282119a80db718b56a8989bfd8d01b0fe732807559b2e6c1f341ed13fe3a7503f6b495078d89882478d03c7de2bc22d928d51e3fa8d2b9ea82b40047e4b31f20626bbaf8dd033553d9ae1417da9dddd82b1376fbaa5b9ef4b257100588472f76a3b37ff864832dfde050f3fdbaf2e5d0d546a2cf22cc559ccf408fdf294bba8bc08b68dc1ddedf667121d53ccc683c78aa5a9a13059e9b9fb5c0994f727dd41ef10fbdd16607b78662cad86a38621a8fdc63710ee53a14279c19f9020d0645584d6eaab992693d1b54d8a9d7cd1508aa398285c7f18fda5e7c203b7d5ba058e87b77b98b0cd2009c5ae32666c9eded24f9b44856967e19b497772026cb46c6132c032ef9afe18586fdedf69b077df75e848354e19e45edfe54f8c09c87cf520b57c782ee4bdb0b2cc2da36d9354386bfef474941535250b100adcc86cca139501d9fae782b660e22a0c0c8733a32b9c5575222f211a6e4aad25f7821c6750da04b7ad9fb046138afb9a3b4c480b6d8f876b5cf9723f8fc12d69d3902058a2cfafc736e260e6332ccfb0097d51efe233a3702354c3019aaa45c09ae168073fc9af30565a170bb935dc1c1231ef8b3bca8bb6947a1304d69fea04b19295de1e826b361bea952a31136e181f926a521b241a9344eb734d6c67da54c7b53ec683358f18a4198146b7d04c905cf921594110df5f99f7bccb8a5bed25311c6d45defb164f6ff064779c0b2cf4a9d944d5b0b9a342ae518bfbc7dcf55e8b5ce9cc6d424bd7f3e196e446d77b8dd8ffb7cf80513f6c72135871b6795a998c58f3d5a61036a85aa657f88265d422dd8ad733a7c971904604de04592c69650e2b20c2821e1e6610a30b92a5c5f246c0f4101d184e4d2dbe023adfb333bf1a6b7b30f05bacfbd0bcd5d10ac2d74e3031b2bbe285355c00aa30708b84dc570fb488c882e2e8595e1fb124f656d8452601178b46e4c17be79f1100d0fb045b4d1c6ab66283a506c3b51bc245e3b4a4fa438d42c33c2cd7d6620d165a83fe087715112626fbd82cd12005c96143d379f8a7937cc28d0edb39b9d5736bffb22c55245421ff9b3120da3caf573844f0889aacd4a28feedbc24d605d4305b915cdcc84caaaa82a35908ded48781ecd7c2a80fc082e3a5611db743473fa94892d997f44aeb9bc5d0809bb0522e0797a7c278c00f8f7d1a7f5ab7b2ec40e3994ccdd4625493f4394d98aa47fe103f75cc80a48cebea2ff386a6653b42a8869728a147f508971053ececac65ca2c0ea9180606387ffcf685c5aa16f64d20af716d2e12af99d7dce78870f56e82ce6d06eafe86497e82bf41e375e7c8e41cb934104fd3ca91d7fdb21e97828864f58135bf69e9699657523f20a1163bd285b5206111e788a63e5e493ebf30db8c2f34a8653ae11f56701095a9e485025e307640b889313d90f9bbb8c3c3e3194d1e02ca0dbce3e8714e05dc927e7b4"}, 0x20)

[ 1596.922510][T14475] binder: 14474:14475 transaction failed 29201/-22, size 30399297484750848--549755813892 line 3147
02:41:22 executing program 3:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1597.007137][T14478] binder_alloc: 14474: binder_alloc_buf, no vma
[ 1597.007482][T14475] binder: BINDER_SET_CONTEXT_MGR already set
[ 1597.023818][T14478] binder: 14474:14478 transaction failed 29189/-3, size 30399297484750848--549755813892 line 3147
02:41:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007400fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1597.072966][T14475] binder: 14474:14475 ioctl 40046207 0 returned -16
02:41:22 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1597.194426][T14488] binder: 14487:14488 transaction failed 29201/-22, size 32651097298436096--549755813892 line 3147
[ 1597.214520][T14488] binder: BINDER_SET_CONTEXT_MGR already set
[ 1597.221275][T14489] binder: 14487:14489 transaction failed 29189/-3, size 32651097298436096--549755813892 line 3147
[ 1597.232689][T14488] binder: 14487:14488 ioctl 40046207 0 returned -16
02:41:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:22 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1597.360325][T14495] binder: 14494:14495 transaction failed 29201/-22, size 34339947158700032--549755813892 line 3147
[ 1597.411235][T14495] binder: BINDER_SET_CONTEXT_MGR already set
[ 1597.422271][T14496] binder: 14494:14496 transaction failed 29189/-3, size 34339947158700032--549755813892 line 3147
[ 1597.490226][T14495] binder: 14494:14495 ioctl 40046207 0 returned -16
02:41:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000200fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:23 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1597.660474][T14504] binder: 14502:14504 transaction failed 29201/-22, size 562949953421312--549755813892 line 3147
[ 1597.700838][T14504] binder: BINDER_SET_CONTEXT_MGR already set
[ 1597.709441][T14506] binder: 14502:14506 transaction failed 29189/-3, size 562949953421312--549755813892 line 3147
[ 1597.745529][T14504] binder: 14502:14504 ioctl 40046207 0 returned -16
02:41:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000300fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:23 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:23 executing program 3:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:23 executing program 5:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x0)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
dup3(r0, r1, 0x80000)

[ 1597.912625][T14512] binder: 14511:14512 transaction failed 29201/-22, size 844424930131968--549755813892 line 3147
[ 1597.969750][T14521] binder_alloc_mmap_handler: 11 callbacks suppressed
[ 1597.969766][T14521] binder_alloc: binder_alloc_mmap_handler: 14511 20ff9000-20ffd000 already mapped failed -16
02:41:23 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1598.028536][T14512] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.039502][T14512] binder: 14511:14512 ioctl 40046207 0 returned -16
02:41:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000400fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1598.199883][T14531] binder_alloc: binder_alloc_mmap_handler: 14529 20ff9000-20ffd000 already mapped failed -16
[ 1598.210999][T14530] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.225342][T14530] binder: 14529:14530 ioctl 40046207 0 returned -16
02:41:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000500fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1598.372299][T14534] binder_alloc: binder_alloc_mmap_handler: 14533 20ff9000-20ffd000 already mapped failed -16
[ 1598.411056][T14534] binder: BINDER_SET_CONTEXT_MGR already set
02:41:23 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000600fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1598.434171][T14534] binder: 14533:14534 ioctl 40046207 0 returned -16
02:41:23 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

[ 1598.560748][T14543] binder_alloc: binder_alloc_mmap_handler: 14539 20ff9000-20ffd000 already mapped failed -16
02:41:24 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000700fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1598.605603][T14541] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.624628][T14541] binder: 14539:14541 ioctl 40046207 0 returned -16
[ 1598.706932][T14551] binder_alloc: binder_alloc_mmap_handler: 14549 20ff9000-20ffd000 already mapped failed -16
[ 1598.728875][T14550] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.736022][T14550] binder: 14549:14550 ioctl 40046207 0 returned -16
[ 1598.754538][ T9146] binder_release_work: 34 callbacks suppressed
[ 1598.754545][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.769487][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:24 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:24 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1)
pipe(&(0x7f0000000180))
recvmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f00000001c0)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=""/183, 0xb7}, 0x8000000000000}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/238, 0xee}, {&(0x7f0000000280)=""/127, 0x7f}, {&(0x7f0000001600)=""/241, 0xf1}, {&(0x7f0000001700)=""/59, 0x3b}], 0x4, &(0x7f0000001780)=""/19, 0x13}, 0x3}, {{&(0x7f00000017c0)=@alg, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001840)=""/22, 0x16}, {&(0x7f0000001880)=""/141, 0x8d}, {&(0x7f0000001940)=""/245, 0xf5}, {&(0x7f0000001a40)=""/208, 0xd0}, {&(0x7f0000001b40)=""/152, 0x98}, {&(0x7f0000001c00)=""/85, 0x55}, {&(0x7f0000001c80)=""/48, 0x30}], 0x7, &(0x7f0000001d40)=""/20, 0x14}, 0x8}, {{&(0x7f0000001d80)=@nfc, 0x80, &(0x7f0000002080)=[{&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/52, 0x34}, {&(0x7f0000001f40)=""/49, 0x31}, {&(0x7f0000001f80)=""/152, 0x98}, {&(0x7f0000002040)=""/23, 0x17}], 0x5}, 0xffff}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)=""/209, 0xd1}], 0x1, &(0x7f0000002240)=""/205, 0xcd}, 0x1}, {{&(0x7f0000002340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000003400)=[{&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)}], 0x2, &(0x7f0000003440)=""/120, 0x78}, 0xfffffffffffffffe}, {{&(0x7f00000034c0)=@un=@abs, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003540)=""/73, 0x49}], 0x1}, 0xd0d}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003600)=""/222, 0xde}, {&(0x7f0000003700)=""/161, 0xa1}, {&(0x7f00000037c0)=""/251, 0xfb}, {&(0x7f00000038c0)=""/168, 0xa8}, {&(0x7f0000003980)=""/99, 0x63}, {&(0x7f0000003a00)=""/234, 0xea}], 0x6, &(0x7f0000003b80)=""/149, 0x95}, 0x1}], 0x8, 0x10020, &(0x7f0000003e40))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1598.900137][T14564] binder_alloc: binder_alloc_mmap_handler: 14561 20ff9000-20ffd000 already mapped failed -16
[ 1598.944356][T14564] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.973658][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1598.982536][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1598.989114][T14564] binder: 14561:14564 ioctl 40046207 0 returned -16
02:41:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1599.112544][T14572] binder_alloc: binder_alloc_mmap_handler: 14570 20ff9000-20ffd000 already mapped failed -16
02:41:24 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1599.155422][T14571] binder: BINDER_SET_CONTEXT_MGR already set
[ 1599.177110][T14571] binder: 14570:14571 ioctl 40046207 0 returned -16
[ 1599.198483][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1599.209527][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000004c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:24 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

[ 1599.352162][T14579] binder_alloc: binder_alloc_mmap_handler: 14577 20ff9000-20ffd000 already mapped failed -16
[ 1599.382256][T14578] binder: BINDER_SET_CONTEXT_MGR already set
02:41:24 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1599.417047][T14578] binder: 14577:14578 ioctl 40046207 0 returned -16
[ 1599.456085][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1599.472661][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1599.537819][T14590] binder_alloc: binder_alloc_mmap_handler: 14587 20ff9000-20ffd000 already mapped failed -16
02:41:25 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1599.583548][T14589] binder: BINDER_SET_CONTEXT_MGR already set
[ 1599.597041][T14589] binder: 14587:14589 ioctl 40046207 0 returned -16
[ 1599.605820][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1599.620809][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006800fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:25 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x40, 0x0)
epoll_create1(0x0)
sendmsg$nfc_llcp(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x27, 0x1, 0x1, 0x7, 0x6, 0x0, "315b5d024e2d4bfd2cb18f0ca579af97f5c0128c4450ca114a258dc50a816d29a946fdd1249ed3f2e2211df976cc30df98fcdb6d5c9c39c4b5fa60394060ba", 0x3e}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000200)="240e30c024f55e593a311a09f41366fd228e96375ebe8d080720e2b632b6e3197890539aa70346fc6db49b47a2bf7966f53573daecabc08ba77e9809e232b22c725d409f438649f00b7f3beda714bff12946d4ca24f9bc270f43fa4cc5b2081b50308caacedd1b62398d58", 0x6b}, {&(0x7f0000000040)="7769f630aa2d9ba8fcd2cf92c2501e61696e1432a7c52b6a9ca801f4b29cac5498dae1f6e837df98d65f223295acff8e6fb6e64a3bcce2a7ce614b127987206e", 0x40}], 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="c8000000000000000b01000000100000974f8fe00c0e86c36c449a0124b01eefffea336d91de8fed633f6b1651af5117ef08606d8562c84b9e872b85e1446fbad1e6c2a43490f16102eb024e2503f595e420872489193bb04079c2fbcf3b1f19c1518329e4119e195b83a2132991df309dc5e3d9a48da6f032564ae26b37f84993f19a4142f8685bd2c69ea1754435355a33a39f9416f7a1320f28ee630faca5943b13de57ab442e6e73fd6ad0e333e5ca350cbfccaca9087fa29bfb64f6933c06d3b1f7730000000000"], 0xc8, 0x20000040}, 0x24004800)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={<r1=>0x0, 0x56, "7c569b24bf7aef605ac2d0525f2e98f3c9291e6500d4292025c9cf389fb60159886dfdb31ebc0668db8c3ed60c59f728c53ca303493e60d167a9601bf50848171d3297967be386bf581ca4b38a82aebd413a9e71263e"}, &(0x7f0000000440)=0x5e)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x5a78, 0x4, 0x2, 0x585, 0x6b0c, 0xfffffffffffff800, 0x0, 0x3ff, r1}, &(0x7f0000000640)=0x20)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000380)={{0x2, 0x66aa462c}, 'port1\x00', 0x6, 0x1002, 0x7, 0x2, 0xfffffffffffffffb, 0x7ff, 0x3c1b, 0x0, 0x3, 0x8})
prctl$PR_SET_TSC(0x1a, 0x2)

[ 1599.742901][T14600] binder_alloc: binder_alloc_mmap_handler: 14598 20ff9000-20ffd000 already mapped failed -16
[ 1599.805606][T14599] binder: BINDER_SET_CONTEXT_MGR already set
[ 1599.831839][T14599] binder: 14598:14599 ioctl 40046207 0 returned -16
02:41:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000006c00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:25 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:25 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1599.993782][T14610] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.010610][T14610] binder: 14608:14610 ioctl 40046207 0 returned -16
[ 1600.021498][T14611] binder_alloc_new_buf_locked: 12 callbacks suppressed
[ 1600.021507][T14611] binder_alloc: 14608: binder_alloc_buf, no vma
02:41:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007400fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1600.192402][T14620] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.218804][T14621] binder_alloc: 14619: binder_alloc_buf, no vma
02:41:25 executing program 2:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x3ff, 0x3f7)
recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080), 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)

[ 1600.267406][T14620] binder: 14619:14620 ioctl 40046207 0 returned -16
02:41:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000007a00fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:25 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1600.412601][T14628] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.434688][T14629] binder_alloc: 14627: binder_alloc_buf, no vma
[ 1600.453700][T14628] binder: 14627:14628 ioctl 40046207 0 returned -16
02:41:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000003fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:26 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1600.607524][T14636] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.626035][T14637] binder_alloc: 14635: binder_alloc_buf, no vma
[ 1600.637708][T14636] binder: 14635:14636 ioctl 40046207 0 returned -16
02:41:26 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000005fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:26 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = add_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000380)="77a44e9346795513751f74f9582ccde0d1f82773f27893d7fe158bf0bb4c0a0f7f4c96927fad7303f702a38ff3437a0f877eb9b5a91feeecb0b4e8fd24d7c2b02cf089329ba1f846f0791ce4e1f05a72eb7f45469e787a957310cc222a682ee843dfb683fd0d31c4e32bbc42ca2aeb679d9b79b9fd496143e8109cab026d6dfb51fe36eddef5e85f4b922a1df7ac26c9d72bd28fc1de6b9d4b122787ed7ea1752069a633fd93b94c1118723644bd01d6bbd4cc70ca04cbe5b88fa466785b981051156a7b812c893a8c0f1ed16802e16bc606f4", 0xd3, 0xfffffffffffffff8)
r4 = request_key(&(0x7f0000000240)='cifs.idmap\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='wlan1!\xa7self\'.\x00', 0xfffffffffffffff8)
keyctl$unlink(0x9, r3, r4)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000040)=0x9)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl(r2, 0x26, &(0x7f0000000480)="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")
connect$netrom(r1, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@null, @bcast, @null, @null, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)

[ 1600.760642][T14647] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.795268][T14648] binder_alloc: 14646: binder_alloc_buf, no vma
[ 1600.818423][T14647] binder: 14646:14647 ioctl 40046207 0 returned -16
02:41:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000006fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1600.959158][T14655] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.986170][T14656] binder_alloc: 14654: binder_alloc_buf, no vma
[ 1601.009097][T14655] binder: 14654:14655 ioctl 40046207 0 returned -16
02:41:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000007fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:26 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1601.138701][T14659] binder: BINDER_SET_CONTEXT_MGR already set
[ 1601.157325][T14660] binder_alloc: 14658: binder_alloc_buf, no vma
[ 1601.187873][T14659] binder: 14658:14659 ioctl 40046207 0 returned -16
02:41:26 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000000afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1601.342540][T14670] binder: BINDER_SET_CONTEXT_MGR already set
[ 1601.372797][T14671] binder_alloc: 14667: binder_alloc_buf, no vma
02:41:26 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:26 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000020fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1601.393623][T14670] binder: 14667:14670 ioctl 40046207 0 returned -16
02:41:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000048fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1601.535172][T14681] binder: BINDER_SET_CONTEXT_MGR already set
[ 1601.546051][T14682] binder_alloc: 14679: binder_alloc_buf, no vma
[ 1601.555942][T14681] binder: 14679:14681 ioctl 40046207 0 returned -16
02:41:27 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x80000)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1601.700194][T14687] binder: BINDER_SET_CONTEXT_MGR already set
[ 1601.729885][T14688] binder_alloc: 14686: binder_alloc_buf, no vma
[ 1601.763752][T14687] binder: 14686:14687 ioctl 40046207 0 returned -16
[ 1601.786812][T14688] binder_transaction: 38 callbacks suppressed
[ 1601.786841][T14688] binder: 14686:14688 transaction failed 29189/-3, size 5188146770730811392--549755813892 line 3147
02:41:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000004cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:27 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1602.002851][T14694] binder: 14693:14694 transaction failed 29201/-22, size 5476377146882523136--549755813892 line 3147
[ 1602.069456][T14694] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.100351][T14694] binder: 14693:14694 ioctl 40046207 0 returned -16
02:41:27 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

[ 1602.119941][T14695] binder: 14693:14695 transaction failed 29189/-22, size 5476377146882523136--549755813892 line 2994
02:41:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000060fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:27 executing program 2:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:27 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1602.267472][T14706] binder: 14703:14706 transaction failed 29201/-22, size 6917529027641081856--549755813892 line 3147
[ 1602.346253][T14706] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.368111][T14711] binder: 14703:14711 transaction failed 29189/-3, size 6917529027641081856--549755813892 line 3147
[ 1602.412774][T14706] binder: 14703:14706 ioctl 40046207 0 returned -16
02:41:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000068fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1602.584858][T14716] binder: 14715:14716 transaction failed 29201/-22, size 7493989779944505344--549755813892 line 3147
02:41:28 executing program 5:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x80000, 0x0)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x6, 0x7, [{0xdb81, 0x0, 0x4}, {0x3}, {0x7, 0x0, 0x1}, {0xffffffffffffffff, 0x0, 0x7}, {0x7, 0x0, 0x2}, {0x80, 0x0, 0x9}]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x3f, 0x4002)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x20)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0x6b)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1602.692247][T14716] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.707777][T14720] binder: 14715:14720 transaction failed 29189/-3, size 7493989779944505344--549755813892 line 3147
02:41:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000006cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1602.744628][T14716] binder: 14715:14716 ioctl 40046207 0 returned -16
02:41:28 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:28 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1602.877463][T14725] binder: 14724:14725 transaction failed 29201/-22, size 7782220156096217088--549755813892 line 3147
[ 1602.933227][T14725] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.960925][T14725] binder: 14724:14725 ioctl 40046207 0 returned -16
[ 1602.976875][T14729] binder: 14724:14729 transaction failed 29189/-3, size 7782220156096217088--549755813892 line 3147
02:41:28 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000074fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:28 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1603.126526][T14739] binder: 14738:14739 transaction failed 29201/-22, size 8358680908399640576--549755813892 line 3147
[ 1603.184861][T14743] binder_alloc_mmap_handler: 14 callbacks suppressed
[ 1603.184879][T14743] binder_alloc: binder_alloc_mmap_handler: 14738 20ff9000-20ffd000 already mapped failed -16
[ 1603.229681][T14739] binder: BINDER_SET_CONTEXT_MGR already set
[ 1603.254135][T14739] binder: 14738:14739 ioctl 40046207 0 returned -16
02:41:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000007afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1603.482979][T14749] binder_alloc: binder_alloc_mmap_handler: 14747 20ff9000-20ffd000 already mapped failed -16
[ 1603.517295][T14748] binder: BINDER_SET_CONTEXT_MGR already set
[ 1603.545297][T14748] binder: 14747:14748 ioctl 40046207 0 returned -16
02:41:29 executing program 5:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x6, {0x7, 0x1d, 0x2, 0x100, 0x3f, 0x7, 0x4, 0x6}}, 0x50)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x1f, 0x1, 0x7, 0x12, 0x5, 0x3, 0x6, 0x12e, 0x1}})

02:41:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000002fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:29 executing program 1:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

[ 1603.712740][T14759] binder_alloc: binder_alloc_mmap_handler: 14755 20ff9000-20ffd000 already mapped failed -16
02:41:29 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1603.759051][T14756] binder: BINDER_SET_CONTEXT_MGR already set
[ 1603.784035][T14756] binder: 14755:14756 ioctl 40046207 0 returned -16
02:41:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000003fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1603.827849][ T8436] binder_release_work: 34 callbacks suppressed
[ 1603.827857][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1603.866138][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:29 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:29 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1603.944013][T14771] binder_alloc: binder_alloc_mmap_handler: 14768 20ff9000-20ffd000 already mapped failed -16
[ 1604.014590][T14775] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.037945][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1604.044901][T14775] binder: 14768:14775 ioctl 40046207 0 returned -16
[ 1604.052887][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000004fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1604.186668][T14783] binder_alloc: binder_alloc_mmap_handler: 14781 20ff9000-20ffd000 already mapped failed -16
[ 1604.223457][T14782] binder: BINDER_SET_CONTEXT_MGR already set
02:41:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000005fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1604.239114][T14782] binder: 14781:14782 ioctl 40046207 0 returned -16
[ 1604.256682][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1604.265752][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1604.381863][T14787] binder_alloc: binder_alloc_mmap_handler: 14785 20ff9000-20ffd000 already mapped failed -16
02:41:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000006fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1604.426539][T14786] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.443900][T14786] binder: 14785:14786 ioctl 40046207 0 returned -16
[ 1604.455323][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1604.466658][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:30 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1604.557040][T14793] binder_alloc: binder_alloc_mmap_handler: 14790 20ff9000-20ffd000 already mapped failed -16
02:41:30 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)
getuid()
lseek(r0, 0x0, 0x6)
pipe(&(0x7f0000000340)={<r1=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'dummy0\x00\x00\x00\xea\xff\xff\xff\x00', &(0x7f0000000200)=@ethtool_test={0x1a, 0x3, 0x7, 0x2, [0x7ff, 0x6]}})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})

[ 1604.606044][T14792] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.624498][T14792] binder: 14790:14792 ioctl 40046207 0 returned -16
[ 1604.674356][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000007fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:30 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:30 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1604.815673][T14805] binder_alloc: binder_alloc_mmap_handler: 14802 20ff9000-20ffd000 already mapped failed -16
[ 1604.847897][T14803] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.869453][T14803] binder: 14802:14803 ioctl 40046207 0 returned -16
[ 1604.889609][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000000afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:30 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1605.008961][T14816] binder_alloc: binder_alloc_mmap_handler: 14813 20ff9000-20ffd000 already mapped failed -16
[ 1605.063632][T14814] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.087960][T14814] binder: 14813:14814 ioctl 40046207 0 returned -16
[ 1605.096659][T14819] binder_alloc_new_buf_locked: 9 callbacks suppressed
[ 1605.096670][T14819] binder_alloc: 14813: binder_alloc_buf, no vma
02:41:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000048fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1605.200226][T14824] binder_alloc: binder_alloc_mmap_handler: 14822 20ff9000-20ffd000 already mapped failed -16
[ 1605.258680][T14823] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.278408][T14823] binder: 14822:14823 ioctl 40046207 0 returned -16
[ 1605.303195][T14825] binder_alloc: 14822: binder_alloc_buf, no vma
02:41:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000004cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000060fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1605.451484][T14829] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.485365][T14829] binder: 14827:14829 ioctl 40046207 0 returned -16
[ 1605.492348][T14830] binder_alloc: 14827: binder_alloc_buf, no vma
[ 1605.548134][T14835] binder: BINDER_SET_CONTEXT_MGR already set
02:41:31 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1605.600701][T14835] binder: 14834:14835 ioctl 40046207 0 returned -16
02:41:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000068fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:31 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:31 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:31 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:31 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1605.800465][T14844] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.822152][T14845] binder_alloc: 14841: binder_alloc_buf, no vma
[ 1605.836507][T14844] binder: 14841:14844 ioctl 40046207 0 returned -16
02:41:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000006cfcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:31 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1606.000255][T14859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.034804][T14861] binder_alloc: 14858: binder_alloc_buf, no vma
02:41:31 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:31 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1606.065981][T14859] binder: 14858:14859 ioctl 40046207 0 returned -16
02:41:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000074fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:31 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1606.264361][T14873] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.298076][T14875] binder_alloc: 14872: binder_alloc_buf, no vma
[ 1606.322503][T14873] binder: 14872:14873 ioctl 40046207 0 returned -16
02:41:31 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d00000000000000007afcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1606.558710][T14884] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.577610][T14886] binder_alloc: 14881: binder_alloc_buf, no vma
[ 1606.591226][T14884] binder: 14881:14884 ioctl 40046207 0 returned -16
02:41:32 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:32 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:32 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000120000007fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:32 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:32 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1606.977097][T14900] binder_transaction: 29 callbacks suppressed
[ 1606.977116][T14900] binder: 14899:14900 transaction failed 29201/-22, size 0--554050781166 line 3147
02:41:32 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1607.046185][T14900] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.076046][T14900] binder: 14899:14900 ioctl 40046207 0 returned -16
[ 1607.077085][T14906] binder_alloc: 14899: binder_alloc_buf, no vma
02:41:32 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1607.145317][T14906] binder: 14899:14906 transaction failed 29189/-3, size 0--554050781166 line 3147
02:41:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d0000000000000000000000000080ffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:32 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1607.307816][T14916] binder: 14915:14916 transaction failed 29201/-22, size 0--549755813888 line 3147
02:41:32 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1607.414760][T14916] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.448526][T14920] binder_alloc: 14915: binder_alloc_buf, no vma
[ 1607.491007][T14916] binder: 14915:14916 ioctl 40046207 0 returned -16
[ 1607.512743][T14920] binder: 14915:14920 transaction failed 29189/-3, size 0--549755813888 line 3147
02:41:33 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:33 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

02:41:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff00000001b536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1607.875804][T14931] binder_alloc: 14930: binder_alloc_buf size 72102077029190760 failed, no address space
[ 1607.891898][T14931] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384)
[ 1607.912760][T14931] binder: 14930:14931 transaction failed 29201/-28, size 0-72057598332895228 line 3147
[ 1607.933628][T14931] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.944839][T14934] binder_alloc: 14930: binder_alloc_buf, no vma
[ 1607.955990][T14931] binder: 14930:14931 ioctl 40046207 0 returned -16
[ 1607.970614][T14934] binder: 14930:14934 transaction failed 29189/-3, size 0-72057598332895228 line 3147
02:41:33 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:33 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
fremovexattr(0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb509f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1608.167519][T14940] binder: 14939:14940 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:33 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1608.231167][T14944] binder_alloc_mmap_handler: 9 callbacks suppressed
[ 1608.231185][T14944] binder_alloc: binder_alloc_mmap_handler: 14939 20ff9000-20ffd000 already mapped failed -16
02:41:33 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

[ 1608.319824][T14940] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.350155][T14940] binder: 14939:14940 ioctl 40046207 0 returned -16
[ 1608.382530][T14951] binder: 14939:14951 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb523f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:33 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

[ 1608.548458][T14957] binder: 14956:14957 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1608.587720][T14960] binder_alloc: binder_alloc_mmap_handler: 14956 20ff9000-20ffd000 already mapped failed -16
[ 1608.637030][T14957] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.661414][T14957] binder: 14956:14957 ioctl 40046207 0 returned -16
[ 1608.661854][T14962] binder: 14956:14962 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb525f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:34 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1608.953883][T14968] binder_alloc: binder_alloc_mmap_handler: 14965 20ff9000-20ffd000 already mapped failed -16
[ 1608.998638][T14966] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.036569][T14966] binder: 14965:14966 ioctl 40046207 0 returned -16
[ 1609.090266][ T8436] binder_release_work: 26 callbacks suppressed
[ 1609.090274][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb52bf5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:34 executing program 0:
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:34 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1609.201854][T14975] binder_alloc: binder_alloc_mmap_handler: 14973 20ff9000-20ffd000 already mapped failed -16
[ 1609.246507][T14974] binder: BINDER_SET_CONTEXT_MGR already set
02:41:34 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

[ 1609.286932][T14974] binder: 14973:14974 ioctl 40046207 0 returned -16
[ 1609.370867][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1609.384257][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb52df5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:34 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

[ 1609.501053][T14991] binder_alloc: binder_alloc_mmap_handler: 14989 20ff9000-20ffd000 already mapped failed -16
[ 1609.558818][T14990] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.594230][T14990] binder: 14989:14990 ioctl 40046207 0 returned -16
[ 1609.630905][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1609.640977][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb530f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1609.808130][T14999] binder_alloc: binder_alloc_mmap_handler: 14997 20ff9000-20ffd000 already mapped failed -16
[ 1609.867291][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1609.883698][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:35 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb537f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1610.016797][T15007] binder_alloc: binder_alloc_mmap_handler: 15004 20ff9000-20ffd000 already mapped failed -16
[ 1610.036077][T15005] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.055257][T15005] binder: 15004:15005 ioctl 40046207 0 returned -16
02:41:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb563f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1610.077850][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1610.086602][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:35 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

02:41:35 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1610.233318][T15018] binder_alloc: binder_alloc_mmap_handler: 15013 20ff9000-20ffd000 already mapped failed -16
02:41:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1610.279342][T15014] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.285380][T15014] binder: 15013:15014 ioctl 40046207 0 returned -16
02:41:35 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1610.351975][T15018] binder_alloc_new_buf_locked: 6 callbacks suppressed
[ 1610.351985][T15018] binder_alloc: 15013: binder_alloc_buf, no vma
[ 1610.398126][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:35 executing program 0:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb568f5510659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1610.604414][T15033] binder_alloc: binder_alloc_mmap_handler: 15031 20ff9000-20ffd000 already mapped failed -16
[ 1610.647089][T15032] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.682209][T15032] binder: 15031:15032 ioctl 40046207 0 returned -16
02:41:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5680659836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:36 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1610.903154][T15038] binder_alloc: binder_alloc_mmap_handler: 15036 20ff9000-20ffd000 already mapped failed -16
02:41:36 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:36 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9)
lseek(r0, 0x0, 0x4)

[ 1610.968268][T15037] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.020231][T15037] binder: 15036:15037 ioctl 40046207 0 returned -16
[ 1611.050099][T15044] binder_alloc: 15036: binder_alloc_buf, no vma
02:41:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510559836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1611.252529][T15054] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.289429][T15055] binder_alloc: 15053: binder_alloc_buf, no vma
02:41:36 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1611.322380][T15054] binder: 15053:15054 ioctl 40046207 0 returned -16
02:41:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510759836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:36 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1611.537703][T15060] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.558268][T15063] binder_alloc: 15059: binder_alloc_buf, no vma
02:41:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1611.590611][T15060] binder: 15059:15060 ioctl 40046207 0 returned -16
02:41:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510959836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, &(0x7f0000000040)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

02:41:37 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1611.763339][T15069] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.797471][T15071] binder_alloc: 15068: binder_alloc_buf, no vma
02:41:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="3e9b1b28c9e57fece14d41e55964182eb4677a3a76cf69fec4d421ec1daefca49191e1309297bb3937f337c55154bdd59b068d413d04c97d191b1f268b12b659e14aa36a4eeb6f01e20aa3d0c73f9db5feb497e354437a4b70a629ad3a9a3741bc36b27c3bf675fe644c63ab9078e9797b80f3414b6faf10ecf84d5948f59f8f19f7f402131454f79e05012273a58463189d2053729254ad2705ceeef56883fe75aedc5a57448dc89a4865be2ad130b5ab204ba591be0ce510731b26f061b65ba2173e7458ff939fae34b73e3d80c07e9d810c0f86a2770db12f55a22475f46229daf60de561abbf78ff5c780985bf848def827eccb9730c65e6be4f1b248fe715d90da866311e8a34ebf485a57400b4aeb57ae86587f11307b95474c61910b40ee54a8b6eaea76f80f8765eb617c624129b32b2758857db12586eb0c06a04bf3d3ac7320ad9afd3ba24c9d5c3f5a54d695e3673dcd5871fdc496af8b162b39e656ec64986e3774ee7c579d401a2677189d9b1c11c37a907bd1097aa397399560421952973a53afe2c4f64cd5bf52e2451955cb59c6df0ec4572a3c4c3e337f05da35b511312f397dbf6a6ca2f52d7988c5a8b1a01b8c9532922626197f1c0b7353dea62aa2cc6db1985e5cbeba584623724bf24845f51d4cd218d026090375c243ba50c610bcb4a3204926837fe5ec33ceb682e1b11277ab89e5b66d17939f0b7040803959bda5717b1ffc4aa5e0f1c2d9fcce0314d91e482d8ebc5506f58502d74d2125a114844f1aa0590c2ddc06ea6ef60304fe996c3b760bccbcc9fd0587c1c86fae0fadd798387364fd1da7fe123afc86a31034bc9ec2f1591003765e4e8858700595bc1686c1e2fc45cc9916805dfa83d18f0e23c2309b29782fe47f9036b094458d870e1faf4d5e8fff748345c9162d32e3c23531a4b76f0df124e106ff500aaa00b6fd2f6e8426b04609935a5f487b0958e5e633e05a4e065679494cf3fd7c71177b72ea08ccef2d9816b3b38287e36d2593db2d466de2ec08b349e5a2b27d339d856f0d9cf4401a8e5f350fa448e179eb5b9f34f01f287d1bafcd4711946c072a9d9c1c31d5d8638012ee41002aa99c2a181eaca32d8ef2560bab2346b1324e0c4ed3f193a17294511edf5d1398358b5d11efa74464d2906b63fe9499dfc4691fba80fc214d8c5518c235e48ff9b52b35407425f42d7517360c295bb31572e9b4f8e80b5e0b5ba0600eb139a626ded874a6ec921c093f5dd6d7d9f4d506b16ebc05f6235996769ae48225994351d7fccb0b3823a69a4965304b7866f23c46daddd0fdd78e32139e5855fb86fa669dc7f272a4c1c61e0f4ceb7fffea36b3e0e940cdc4529b7d9a583cdd91d6d8000f3febb7f743e3737086573d76f5dcd52f1db0d576a0238343923efb08633b7e1c34129c49c627d9308e4e0d651f35696a229924d95e9f6cc22daa853892efd3447783cfc02e4257ff478f8b96321fb6554c6887d9a6faffdc494aac3f1d7f39097833298ba61a63c78ba7d6e12317745e464801c51fe06ae8427647a7cd5b2cb1857b97661ad1e7baa3f8a7cdb62500330ee8dab1ef45e0681b0837cef348712887c2d341159a1a6062a5e5019876c75c8fed08f5f74265155d29ddc248ead80bb00818316c3f16534097fa19f761a30fe79aa29370a70b87670d2e5da35378ef671f9a7fc0d8d7521704a69473df6a6c2374190966a4b253dbd5f1f05de4ca957fe7649ff4fdb4f5ca3cac7dc8976c559cb6f9c7a68141f3700aea83301bfa1802efe6171b57829134b72ff1f7b336181cfb0fcbb84a5e897687e167c457b062b3087f58b9a8ed6318a6e3c22c805c545bf306a9d8fb3175875e334f18ca03237ad033b51014edebe50c9481d1dfec7c970da227189a6a7e55dadcd6857c08ee49a1d746c52f18e803e2438ec951b723ec2307a397f0aa5b3ab6d6f8ddd0deac5d170777650cd4d2ce26a36b15b47acf24c696d4d4b70cbec17175422520bc52b9a1dca03a5c14f570c118725c18bf312b6a890462b9cb7b6c02ddde99e116de35281ec8879e1c22cd63368a10c8d662a45ff795ddcc2487b225c5e04aaabe32e0da60bb157fe4003ab3bff6c55496294175dd97e99b744fda5c6245b12a6f692097ff1d6e30daa723bb7341757c62c4e5e3edcd955d7b10e99ab2a6ec5e40fe1a9f9fd181c6599b64e687cb9e884899a380dcd1e4374335aff638ba9a3c9f8c3003ea4a9d4c7bb7dcc4c5391bfdf920e44056d3d8a368801ad004f7bd5fec208f2357685ee1dae8cc534fec1bfed62b876e8b25d621e14682892ad67e9c963eb7abe335e5efeff1dac64d091894261b04d4f0be7264e91e2d7a55c0da4ebdf3025e524cff488e98569852a859998f02aacb66ec90a544576bb878e5cd78da44acb2c0a3e65a646f6403d08403aa1415c71fe9fe1e7806372b053229c281e15e3577a11d2ff83c972d97275e6712073e2fe9c067fd8a85412a0875f8e19d50562169b749c70feeb4d7d46659a7642a5703c32b6fb479c831b4521916a4fe5bc9d48063ae967caf8225902f368656ca747233990676342a357166e6d5b0591db8711810d1cfa92d1d725c64014206822c4329db80cbdf3febb2c74805451605fc10da67723b5b349d474ad1fcbaf368091b9eff0fb2ad7b5170adbb0443cc61893406b734deb39509ed664b4766cae0e221be55bc31176577500e0565d31bb7a0fb489a00d35040ce1ac1fc3790c6bb44f0a4757ae769c6d473337ee8145287d8a472022c1ba99d4849af47323784acb667b456589490a5af164afcbe54d246613cce975f0ae35ad46dde7047de4d411624dc5c85c43ca6fe08a2e94c8f1364b0d00c8a0ac4028ff602428ad21190de7bb0ba7e29f3828b4ac7a5a3003abe426f8f129bb30dd09c95a4eadc29ef7b60f029dc16417acaf461a7eb8079e13499ab4ee2febe866a3454e9215dac2a46825f3e5ea00a6d33e8f769e492252bb16fb2c4324749c1a68663a72608bd71a7dafbeffe980ccfa67c2e27f9f1ce5b0be18298ab6070d60c48d047f879598c8c66151a10d8ab6c21f934f01620e584064720f60c08e308acdf423c25372153cc4c9be1522c62a43bd06bae2fc9b9878ce74a78481cc46cb2428337b32f8ad6ea8e1f373fa7e85e0ce02fd16485b5ceddb364625afa4c4874927065634405428afd5b462d7d09b3e401884eb39f4a969c40536477194bce52c4fd966b4b32e60e160f8c46f91ab00869fbbe7b28585aebe58b2e815e547457e1ef5e9839b6aa4ed4098f6900aa3b1417c7aae714aebbc0d99677cae94639a7522208df39e78be862c9851f4aec490bab6e6d6f2a3f497a9cb3c8f598670a5bf8c0cbc03e398956086375efa1fbb399e83ac5b04cbdabdd61bf7c53ad2e797f3891be57207815257063b631b1d6a4f041ba472ece29b2aa44d72d2ae2a844993f7b81542772ec16229a4ac18cd4c248988209742a8c3769c85d6658c457cde8d917a6701c74acff85f2d96757df71d803c320f2c773574873b215fe6486abe306dd861cbbfc80bfcfd522c8172b63adebe28e7ad92720fa2bf893d03e4069f4a22c4a3afb300151d130f7e9f1f0b58537383105436f857de6ca818e7304c44d50a3ab05bd6fdd07a24d3f84d9f2f519f7082a5b468e98e0b010c816b80b8d95e875a61b2ef2fbfce6fe62d440bd72d0a55ac4e22bc8faf0a942c61f1a0efec901bda0e8414bd017f65d7e371f8bf98596b0767ec078f7dbc5878601a2bfdc502f8d25a1da2c391cdd9b9b929527e97dd0e07d3ec111bcaec0bf46a4e03840e9452aeb94caf87045098335dd355fec3d80a950238953245bc8e6dc820b5e7b48ac3fb81221ac241265a85bfe55940e3a070111983e77809e721e9e39e82debbab84bcbaa4c53ffbd5d8dd2fe99d0a8a517f6f3b7023ff2d7d0b5d12bbb1fd842f01807c59c2ce36d861d4ab032d28c4a50504c13f482bce89c598914ae5ea308186efb50802a4a038d1dfa3966c101b47d221830cb7c3d806c149839d12277878a5c7b7e608909863", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1611.819482][T15069] binder: 15068:15069 ioctl 40046207 0 returned -16
02:41:37 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5516859836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:37 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1611.993761][T15084] binder_transaction: 21 callbacks suppressed
[ 1611.993778][T15084] binder: 15081:15084 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:37 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:37 executing program 0:
rt_sigaction(0x0, &(0x7f0000000100)={&(0x7f0000000080)="c4c3955eb4a7faa2584e5a1c054498c4235d40bcad00100000fe0f0f05f3000000b7f2a4c403015e1500000000020f38055df4c4e2a1b6fc0f9d2ddbda0000", {}, 0x0, 0x0}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000440)="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", 0xb42)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffebc)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x80000018000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[ 1612.122349][T15092] binder_alloc: 15081: binder_alloc_buf, no vma
[ 1612.123166][T15084] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.138451][T15092] binder: 15081:15092 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1612.169694][T15084] binder: 15081:15084 ioctl 40046207 0 returned -16
02:41:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510668836698d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:37 executing program 0:
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0)
epoll_create1(0x0)
pipe(&(0x7f0000000340))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8})
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0xa)

[ 1612.306104][T15100] binder: 15099:15100 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1612.356856][T15100] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.372384][T15103] binder_alloc: 15099: binder_alloc_buf, no vma
[ 1612.387011][T15100] binder: 15099:15100 ioctl 40046207 0 returned -16
[ 1612.402233][T15103] binder: 15099:15103 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:37 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
execve(0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)

02:41:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659830a98d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1612.595757][T15108] binder: 15107:15108 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:38 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1612.670461][T15108] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.694523][T15110] binder_alloc: 15107: binder_alloc_buf, no vma
[ 1612.723312][T15108] binder: 15107:15108 ioctl 40046207 0 returned -16
[ 1612.752680][T15110] binder: 15107:15110 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659832598d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

[ 1612.959412][T15117] binder: 15116:15117 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:38 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:38 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:38 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1613.021865][T15117] binder: BINDER_SET_CONTEXT_MGR already set
[ 1613.066448][T15119] binder_alloc: 15116: binder_alloc_buf, no vma
[ 1613.109740][T15117] binder: 15116:15117 ioctl 40046207 0 returned -16
[ 1613.144086][T15119] binder: 15116:15119 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:38 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836898d2f61de7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:38 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1613.370438][T15134] binder: 15131:15134 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1613.397550][T15135] binder_alloc_mmap_handler: 7 callbacks suppressed
[ 1613.397568][T15135] binder_alloc: binder_alloc_mmap_handler: 15131 20ff9000-20ffd000 already mapped failed -16
02:41:38 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
execve(0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)

[ 1613.478195][T15134] binder: BINDER_SET_CONTEXT_MGR already set
02:41:38 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1613.521244][T15134] binder: 15131:15134 ioctl 40046207 0 returned -16
[ 1613.541318][T15135] binder: 15131:15135 transaction failed 29189/-22, size 0--549755813892 line 2994
02:41:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f668e7ddf8c6638ce4007428"], 0x0, 0x0, 0x0})

02:41:39 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1613.683091][T15150] binder_alloc: binder_alloc_mmap_handler: 15147 20ff9000-20ffd000 already mapped failed -16
[ 1613.714816][T15149] binder: BINDER_SET_CONTEXT_MGR already set
[ 1613.724422][T15149] binder: 15147:15149 ioctl 40046207 0 returned -16
[ 1613.731701][T15150] binder_alloc: 15147: binder_alloc_buf, no vma
02:41:39 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c60a8ce4007428"], 0x0, 0x0, 0x0})

02:41:39 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1613.890149][T15159] binder_alloc: binder_alloc_mmap_handler: 15157 20ff9000-20ffd000 already mapped failed -16
[ 1613.966607][T15158] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.006324][T15158] binder: 15157:15158 ioctl 40046207 0 returned -16
02:41:39 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:39 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:39 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6238ce4007428"], 0x0, 0x0, 0x0})

[ 1614.258707][T15175] binder_alloc: binder_alloc_mmap_handler: 15169 20ff9000-20ffd000 already mapped failed -16
[ 1614.302594][T15170] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.331423][T15170] binder: 15169:15170 ioctl 40046207 0 returned -16
02:41:39 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
execve(0x0, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)

[ 1614.367414][ T9146] binder_release_work: 25 callbacks suppressed
[ 1614.367422][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1614.387968][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6258ce4007428"], 0x0, 0x0, 0x0})

[ 1614.594043][T15186] binder_alloc: binder_alloc_mmap_handler: 15183 20ff9000-20ffd000 already mapped failed -16
[ 1614.677919][T15185] binder: BINDER_SET_CONTEXT_MGR already set
[ 1614.690001][T15185] binder: 15183:15185 ioctl 40046207 0 returned -16
[ 1614.726363][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1614.735449][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:40 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c62a8ce4007428"], 0x0, 0x0, 0x0})

[ 1614.957289][T15194] binder_alloc: binder_alloc_mmap_handler: 15190 20ff9000-20ffd000 already mapped failed -16
[ 1615.036249][T15192] binder: BINDER_SET_CONTEXT_MGR already set
[ 1615.067254][T15192] binder: 15190:15192 ioctl 40046207 0 returned -16
[ 1615.109916][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1615.117026][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c62b8ce4007428"], 0x0, 0x0, 0x0})

02:41:40 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:40 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1615.288205][T15200] binder_alloc: binder_alloc_mmap_handler: 15198 20ff9000-20ffd000 already mapped failed -16
02:41:40 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1615.366999][T15199] binder: BINDER_SET_CONTEXT_MGR already set
[ 1615.408051][T15199] binder: 15198:15199 ioctl 40046207 0 returned -16
[ 1615.438787][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1615.445718][T15200] binder_alloc_new_buf_locked: 4 callbacks suppressed
02:41:40 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:40 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8e, 0x2001)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000000c0)={@initdev}, &(0x7f0000000100)=0x14)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x4000000000000)
syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ftruncate(r2, 0x2008000)
sendfile(r0, r2, 0x0, 0x80000000000d)

02:41:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c62d8ce4007428"], 0x0, 0x0, 0x0})

[ 1615.445729][T15200] binder_alloc: 15198: binder_alloc_buf, no vma
[ 1615.478017][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
[ 1615.606592][T15218] binder_alloc: binder_alloc_mmap_handler: 15215 20ff9000-20ffd000 already mapped failed -16
[ 1615.630639][T15218] binder_alloc: 15215: binder_alloc_buf, no vma
[ 1615.644576][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1615.655848][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c62e8ce4007428"], 0x0, 0x0, 0x0})

02:41:41 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1615.802935][T15225] binder_alloc: binder_alloc_mmap_handler: 15222 20ff9000-20ffd000 already mapped failed -16
02:41:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1615.851537][T15223] binder: BINDER_SET_CONTEXT_MGR already set
[ 1615.881051][T15223] binder: 15222:15223 ioctl 40046207 0 returned -16
[ 1615.903294][T15228] binder_alloc: 15222: binder_alloc_buf, no vma
02:41:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6308ce4007428"], 0x0, 0x0, 0x0})

02:41:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1616.111483][T15236] binder_alloc: binder_alloc_mmap_handler: 15233 20ff9000-20ffd000 already mapped failed -16
[ 1616.199189][T15234] binder_alloc: 15233: binder_alloc_buf, no vma
[ 1616.239838][T15238] binder: BINDER_SET_CONTEXT_MGR already set
[ 1616.267821][T15238] binder: 15233:15238 ioctl 40046207 0 returned -16
02:41:41 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:41 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:41 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6588ce4007428"], 0x0, 0x0, 0x0})

02:41:41 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc))
r1 = syz_open_pts(r0, 0x2)
close(r0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1)

02:41:41 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1616.568783][T15255] binder: BINDER_SET_CONTEXT_MGR already set
[ 1616.617822][T15255] binder: 15247:15255 ioctl 40046207 0 returned -16
[ 1616.618501][T15256] binder_alloc: 15247: binder_alloc_buf, no vma
02:41:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6648ce4007428"], 0x0, 0x0, 0x0})

02:41:42 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:42 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)

[ 1616.788642][T15264] binder: BINDER_SET_CONTEXT_MGR already set
[ 1616.832907][T15266] binder_alloc: 15263: binder_alloc_buf, no vma
[ 1616.870770][T15264] binder: 15263:15264 ioctl 40046207 0 returned -16
02:41:42 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6688ce4007428"], 0x0, 0x0, 0x0})

02:41:42 executing program 2:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1617.119491][T15278] binder_transaction: 22 callbacks suppressed
[ 1617.119509][T15278] binder: 15277:15278 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1617.223399][T15278] binder: BINDER_SET_CONTEXT_MGR already set
[ 1617.264973][T15283] binder_alloc: 15277: binder_alloc_buf, no vma
[ 1617.303011][T15278] binder: 15277:15278 ioctl 40046207 0 returned -16
[ 1617.343081][T15283] binder: 15277:15283 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:42 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6698ce4007428"], 0x0, 0x0, 0x0})

[ 1617.518412][T15288] binder: 15287:15288 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1617.596685][T15288] binder: BINDER_SET_CONTEXT_MGR already set
[ 1617.629985][T15288] binder: 15287:15288 ioctl 40046207 0 returned -16
[ 1617.630787][T15291] binder_alloc: 15287: binder_alloc_buf, no vma
02:41:43 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1617.773618][T15291] binder: 15287:15291 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c66c8ce4007428"], 0x0, 0x0, 0x0})

02:41:43 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)

02:41:43 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1617.990341][T15301] binder: 15299:15301 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1618.056513][T15301] binder: BINDER_SET_CONTEXT_MGR already set
[ 1618.145417][T15301] binder: 15299:15301 ioctl 40046207 0 returned -16
[ 1618.145591][T15308] binder_alloc: 15299: binder_alloc_buf, no vma
[ 1618.211619][T15308] binder: 15299:15308 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:43 executing program 2:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c66f8ce4007428"], 0x0, 0x0, 0x0})

[ 1618.423888][T15312] binder: 15311:15312 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1618.443943][T15313] binder_alloc_mmap_handler: 5 callbacks suppressed
[ 1618.443961][T15313] binder_alloc: binder_alloc_mmap_handler: 15311 20ff9000-20ffd000 already mapped failed -16
[ 1618.532786][T15312] binder: BINDER_SET_CONTEXT_MGR already set
[ 1618.538831][T15312] binder: 15311:15312 ioctl 40046207 0 returned -16
[ 1618.610446][T15317] binder_alloc: 15311: binder_alloc_buf, no vma
02:41:44 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:44 executing program 1:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1618.669693][T15317] binder: 15311:15317 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6708ce4007428"], 0x0, 0x0, 0x0})

02:41:44 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1000, 0x20000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2, 0xc}}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8, 0x5e, 0x5, 0x0, 0xd9a})
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="83a45ae15ab738ec61227f8eda8e47f12e8eddded792ad31b3cbba1e490ade63bafecef37a2ce05ebaf9a0aeddc9a51042959f61f79718eb0aafd6a1a5430df9ed0e7b7ac53e8e2254784e4012a848dbe8baf1779abd54ca5826b6b6706d4d7ceabc731df5437b27ab70db5dda7f56eabf2da5cfa16b02e03b5b20cbff59c4edc9c619f95299ff5aa06d77a8778ce09ae744b5d39841af8446851723390341bece18713742629cf35e47d9f8af68c38ad3a15713c486911b1b45798b85ae997e646a7ef94835663ee35e176083095c784c81948294034ba1cd1095a3780282")
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5)

[ 1618.840456][T15324] binder: 15323:15324 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1618.873774][T15327] binder_alloc: binder_alloc_mmap_handler: 15323 20ff9000-20ffd000 already mapped failed -16
[ 1618.896544][T15324] binder: BINDER_SET_CONTEXT_MGR already set
[ 1618.910885][T15324] binder: 15323:15324 ioctl 40046207 0 returned -16
[ 1618.926180][T15327] binder: 15323:15327 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:44 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6738ce4007428"], 0x0, 0x0, 0x0})

[ 1619.112784][T15342] binder_alloc: binder_alloc_mmap_handler: 15338 20ff9000-20ffd000 already mapped failed -16
02:41:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6758ce4007428"], 0x0, 0x0, 0x0})

[ 1619.320269][T15347] binder_alloc: binder_alloc_mmap_handler: 15345 20ff9000-20ffd000 already mapped failed -16
[ 1619.366043][T15346] binder: BINDER_SET_CONTEXT_MGR already set
[ 1619.397480][T15346] binder: 15345:15346 ioctl 40046207 0 returned -16
[ 1619.398432][ T9146] binder_release_work: 20 callbacks suppressed
[ 1619.398439][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:44 executing program 2:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1619.446783][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6788ce4007428"], 0x0, 0x0, 0x0})

[ 1619.620907][T15355] binder_alloc: binder_alloc_mmap_handler: 15353 20ff9000-20ffd000 already mapped failed -16
[ 1619.666660][T15354] binder: BINDER_SET_CONTEXT_MGR already set
[ 1619.687530][T15354] binder: 15353:15354 ioctl 40046207 0 returned -16
02:41:45 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1619.712282][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1619.726049][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4000a28"], 0x0, 0x0, 0x0})

02:41:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1000, 0x20000)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2, 0xc}}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x8, 0x5e, 0x5, 0x0, 0xd9a})
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="83a45ae15ab738ec61227f8eda8e47f12e8eddded792ad31b3cbba1e490ade63bafecef37a2ce05ebaf9a0aeddc9a51042959f61f79718eb0aafd6a1a5430df9ed0e7b7ac53e8e2254784e4012a848dbe8baf1779abd54ca5826b6b6706d4d7ceabc731df5437b27ab70db5dda7f56eabf2da5cfa16b02e03b5b20cbff59c4edc9c619f95299ff5aa06d77a8778ce09ae744b5d39841af8446851723390341bece18713742629cf35e47d9f8af68c38ad3a15713c486911b1b45798b85ae997e646a7ef94835663ee35e176083095c784c81948294034ba1cd1095a3780282")
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5)

02:41:45 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1619.933219][T15367] binder_alloc: binder_alloc_mmap_handler: 15365 20ff9000-20ffd000 already mapped failed -16
[ 1619.987021][T15366] binder: BINDER_SET_CONTEXT_MGR already set
[ 1620.019983][T15366] binder: 15365:15366 ioctl 40046207 0 returned -16
02:41:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1620.033563][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1620.042374][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4002528"], 0x0, 0x0, 0x0})

02:41:45 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1620.234320][T15379] binder_alloc: binder_alloc_mmap_handler: 15377 20ff9000-20ffd000 already mapped failed -16
02:41:45 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1000, 0x20000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2, 0xc}}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="83a45ae15ab738ec61227f8eda8e47f12e8eddded792ad31b3cbba1e490ade63bafecef37a2ce05ebaf9a0aeddc9a51042959f61f79718eb0aafd6a1a5430df9ed0e7b7ac53e8e2254784e4012a848dbe8baf1779abd54ca5826b6b6706d4d7ceabc731df5437b27ab70db5dda7f56eabf2da5cfa16b02e03b5b20cbff59c4edc9c619f95299ff5aa06d77a8778ce09ae744b5d39841af8446851723390341bece18713742629cf35e47d9f8af68c38ad3a15713c486911b1b45798b85ae997e646a7ef94835663ee35e176083095c784c81948294034ba1cd1095a3780282")
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5)

[ 1620.325243][T15378] binder: BINDER_SET_CONTEXT_MGR already set
[ 1620.359721][T15378] binder: 15377:15378 ioctl 40046207 0 returned -16
[ 1620.366710][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4027428"], 0x0, 0x0, 0x0})

[ 1620.458460][T15390] binder_alloc: binder_alloc_mmap_handler: 15388 20ff9000-20ffd000 already mapped failed -16
[ 1620.501944][T15389] binder: BINDER_SET_CONTEXT_MGR already set
[ 1620.519906][T15389] binder: 15388:15389 ioctl 40046207 0 returned -16
[ 1620.540354][T15390] binder_alloc_new_buf_locked: 5 callbacks suppressed
02:41:46 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1620.540364][T15390] binder_alloc: 15388: binder_alloc_buf, no vma
[ 1620.548486][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1620.586841][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:46 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4037428"], 0x0, 0x0, 0x0})

02:41:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1620.812582][T15405] binder_alloc: binder_alloc_mmap_handler: 15400 20ff9000-20ffd000 already mapped failed -16
[ 1620.837356][T15405] binder_alloc: 15400: binder_alloc_buf, no vma
[ 1620.849116][T15402] binder: BINDER_SET_CONTEXT_MGR already set
02:41:46 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1620.874478][T15402] binder: 15400:15402 ioctl 40046207 0 returned -16
[ 1620.915583][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
02:41:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:41:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4047428"], 0x0, 0x0, 0x0})

[ 1621.099441][T15420] binder_alloc: binder_alloc_mmap_handler: 15416 20ff9000-20ffd000 already mapped failed -16
02:41:46 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1621.142681][T15419] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.176803][T15419] binder: 15416:15419 ioctl 40046207 0 returned -16
02:41:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4057428"], 0x0, 0x0, 0x0})

02:41:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1000, 0x20000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2, 0xc}}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="83a45ae15ab738ec61227f8eda8e47f12e8eddded792ad31b3cbba1e490ade63bafecef37a2ce05ebaf9a0aeddc9a51042959f61f79718eb0aafd6a1a5430df9ed0e7b7ac53e8e2254784e4012a848dbe8baf1779abd54ca5826b6b6706d4d7ceabc731df5437b27ab70db5dda7f56eabf2da5cfa16b02e03b5b20cbff59c4edc9c619f95299ff5aa06d77a8778ce09ae744b5d39841af8446851723390341bece18713742629cf35e47d9f8af68c38ad3a15713c486911b1b45798b85ae997e646a7ef94835663ee35e176083095c784c81948294034ba1cd1095a3780282")
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5)

[ 1621.379785][T15430] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.418344][T15430] binder: 15425:15430 ioctl 40046207 0 returned -16
[ 1621.419092][T15431] binder_alloc: 15425: binder_alloc_buf, no vma
02:41:47 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:47 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4067428"], 0x0, 0x0, 0x0})

[ 1621.742575][T15440] binder: BINDER_SET_CONTEXT_MGR already set
[ 1621.767915][T15440] binder: 15436:15440 ioctl 40046207 0 returned -16
02:41:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4077428"], 0x0, 0x0, 0x0})

02:41:47 executing program 1:
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1622.213111][T15449] binder_transaction: 19 callbacks suppressed
[ 1622.213129][T15449] binder: 15447:15449 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:47 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x1000, 0x20000)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4)
connect$inet6(r0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x13f, 0x1009}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f00000003c0)={0xf, 0x8, 0xfa00, {r2, 0xc}}, 0x10)
r3 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000002c0)="83a45ae15ab738ec61227f8eda8e47f12e8eddded792ad31b3cbba1e490ade63bafecef37a2ce05ebaf9a0aeddc9a51042959f61f79718eb0aafd6a1a5430df9ed0e7b7ac53e8e2254784e4012a848dbe8baf1779abd54ca5826b6b6706d4d7ceabc731df5437b27ab70db5dda7f56eabf2da5cfa16b02e03b5b20cbff59c4edc9c619f95299ff5aa06d77a8778ce09ae744b5d39841af8446851723390341bece18713742629cf35e47d9f8af68c38ad3a15713c486911b1b45798b85ae997e646a7ef94835663ee35e176083095c784c81948294034ba1cd1095a3780282")
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfffffffffffffe2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x0, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5)

[ 1622.256695][T15449] binder: BINDER_SET_CONTEXT_MGR already set
[ 1622.289458][T15450] binder_alloc: 15447: binder_alloc_buf, no vma
02:41:47 executing program 5:
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x880, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1622.301841][T15449] binder: 15447:15449 ioctl 40046207 0 returned -16
[ 1622.325629][T15450] binder: 15447:15450 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce40a7428"], 0x0, 0x0, 0x0})

[ 1622.472566][T15457] binder: 15455:15457 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1622.492866][T15457] binder: BINDER_SET_CONTEXT_MGR already set
[ 1622.504798][T15458] binder_alloc: 15455: binder_alloc_buf, no vma
[ 1622.517212][T15457] binder: 15455:15457 ioctl 40046207 0 returned -16
02:41:48 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
sched_setaffinity(0x0, 0x0, 0x0)
fremovexattr(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:41:48 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1622.548618][T15458] binder: 15455:15458 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4487428"], 0x0, 0x0, 0x0})

[ 1622.757359][T15469] binder: 15468:15469 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:48 executing program 0:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000200)=0x7fffffffff, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x10000004e20}, 0x10)

[ 1622.799348][T15469] binder: BINDER_SET_CONTEXT_MGR already set
[ 1622.821774][T15472] binder_alloc: 15468: binder_alloc_buf, no vma
[ 1622.854944][T15469] binder: 15468:15469 ioctl 40046207 0 returned -16
[ 1622.879389][T15472] binder: 15468:15472 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce44c7428"], 0x0, 0x0, 0x0})

02:41:48 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
listen(r0, 0x7)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)

[ 1623.027611][T15478] binder: 15477:15478 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1623.055941][T15478] binder: BINDER_SET_CONTEXT_MGR already set
02:41:48 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x880, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1623.091449][T15479] binder_alloc: 15477: binder_alloc_buf, no vma
[ 1623.124441][T15478] binder: 15477:15478 ioctl 40046207 0 returned -16
[ 1623.154543][T15479] binder: 15477:15479 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4607428"], 0x0, 0x0, 0x0})

02:41:48 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a102000000000000005bb203dab406d3cab6ea38b3790900"}, 0x220)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "1c56400ef08dc0d7f6ffea3199772f0577915623cdca191dcc06ee3e04cd4eb98b6e444bdb49a176ca0be49468681ed3a055edd05610db8ffb464f1417af72c5677bdc0183e8da9f6e9d0d8071771351"}, 0xd8)
bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca944f64009400050028925aa8000000000000008000f0fffeffff09000000fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1)

[ 1623.320676][T15488] binder: 15487:15488 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1623.354491][T15488] binder: BINDER_SET_CONTEXT_MGR already set
[ 1623.372255][T15489] binder_alloc: 15487: binder_alloc_buf, no vma
[ 1623.399457][T15488] binder: 15487:15488 ioctl 40046207 0 returned -16
[ 1623.420041][T15489] binder: 15487:15489 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:48 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0xb)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0xff, 0x8001}, 0x20)

02:41:48 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4687428"], 0x0, 0x0, 0x0})

02:41:48 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x100000000000088)
recvfrom$inet6(r0, 0x0, 0xfd, 0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

02:41:49 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1623.573598][T15498] binder_alloc_mmap_handler: 7 callbacks suppressed
[ 1623.573615][T15498] binder_alloc: binder_alloc_mmap_handler: 15496 20ff9000-20ffd000 already mapped failed -16
02:41:49 executing program 0:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="08002bbd7000ffdbdfe9c20000000000f8ff0b41c5ffffffffffffff7a30000000004e30618931c8"], 0x1}, 0x1, 0x0, 0x0, 0x5}, 0x10)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffffffffffe01)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000100)=[{0x0, 0x6, 0x33d}, {0x5, 0x4, 0x1, 0x7}]}, 0x10)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
writev(r1, &(0x7f0000000a80)=[{&(0x7f0000000880)="36fcc30d4162e5248193fe680e86259ab50414e5ddb700c9bc576183f0d8f0f96319480ceb7c53dbfa4bf224311f1560fdbf88022043f4b201351f2536fde795a19cf5da1c9c88bfb0e0678c60b86bf07c6b697f8f8adb71128209ec82e241e13e6974ed7ed1172a7c774b52eae8eec158926cb620ee9712c4efed37b8502356e9b9e47c27d16fd300f8f745ad5dce83252aca40efa7a7b8ac4ff639434da6622c6673864ace106332d5c43a8fe9c9766e1d78817e0eddc11244e7f16f783b49459a21", 0xc3}], 0x1)

[ 1623.669098][T15498] binder_alloc: 15496: binder_alloc_buf, no vma
02:41:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce46c7428"], 0x0, 0x0, 0x0})

02:41:49 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000012c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00')
preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0)

[ 1623.836013][T15518] binder_alloc: binder_alloc_mmap_handler: 15516 20ff9000-20ffd000 already mapped failed -16
[ 1623.882573][T15517] binder: BINDER_SET_CONTEXT_MGR already set
[ 1623.894340][T15517] binder: 15516:15517 ioctl 40046207 0 returned -16
[ 1623.913352][T15518] binder_alloc: 15516: binder_alloc_buf, no vma
02:41:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4747428"], 0x0, 0x0, 0x0})

02:41:49 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123d123f3188b070")
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, 0x0, 0x0)

[ 1624.062010][T15525] binder_alloc: binder_alloc_mmap_handler: 15523 20ff9000-20ffd000 already mapped failed -16
[ 1624.078624][T15524] binder: BINDER_SET_CONTEXT_MGR already set
02:41:49 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
mmap(&(0x7f00003b6000/0x200000)=nil, 0x200000, 0x1fffffd, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x9011, r0, 0x0)

[ 1624.102376][T15524] binder: 15523:15524 ioctl 40046207 0 returned -16
02:41:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce47a7428"], 0x0, 0x0, 0x0})

[ 1624.236654][T15537] binder_alloc: binder_alloc_mmap_handler: 15532 20ff9000-20ffd000 already mapped failed -16
[ 1624.291391][T15536] binder: BINDER_SET_CONTEXT_MGR already set
[ 1624.321961][T15536] binder: 15532:15536 ioctl 40046207 0 returned -16
02:41:49 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4000a28"], 0x0, 0x0, 0x0})

02:41:49 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000002000000"], 0x1)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)

[ 1624.511776][T15549] binder_alloc: binder_alloc_mmap_handler: 15546 20ff9000-20ffd000 already mapped failed -16
02:41:50 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x3, 0xb)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0xff, 0x8001}, 0x20)
r2 = socket$inet6(0xa, 0x802, 0x0)
unshare(0x24020400)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x800, 0x2}, 0x20)

[ 1624.557412][T15548] binder: BINDER_SET_CONTEXT_MGR already set
[ 1624.585426][T15548] binder: 15546:15548 ioctl 40046207 0 returned -16
02:41:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070")
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff})
setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000080)=0x190efdc2, 0x4)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000195, 0x0)

[ 1624.628456][ T8436] binder_release_work: 25 callbacks suppressed
[ 1624.628464][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1624.658396][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4002528"], 0x0, 0x0, 0x0})

02:41:50 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket(0x80000000000000a, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [], @loopback}}, 0x1c)
sendmmsg$unix(r1, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000006000)=[@cred={0x20}], 0x20}], 0x1, 0x0)

[ 1624.836765][T15570] binder_alloc: binder_alloc_mmap_handler: 15566 20ff9000-20ffd000 already mapped failed -16
[ 1624.869009][T15568] binder: BINDER_SET_CONTEXT_MGR already set
[ 1624.916355][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1624.929402][T15568] binder: 15566:15568 ioctl 40046207 0 returned -16
02:41:50 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c1202009bc070")
r1 = socket(0x40000000002, 0x3, 0x2)
sendmmsg$unix(r1, &(0x7f0000004a00)=[{&(0x7f0000000000)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000680)=[@cred={0x20}], 0x20}], 0x1, 0x0)

02:41:50 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

[ 1625.037468][T15577] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it!
02:41:50 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce400742f"], 0x0, 0x0, 0x0})

02:41:50 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:50 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

[ 1625.199995][T15593] binder_alloc: binder_alloc_mmap_handler: 15587 20ff9000-20ffd000 already mapped failed -16
[ 1625.232918][T15591] binder: BINDER_SET_CONTEXT_MGR already set
02:41:50 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

[ 1625.249996][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1625.256808][T15591] binder: 15587:15591 ioctl 40046207 0 returned -16
[ 1625.265555][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:50 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007468"], 0x0, 0x0, 0x0})

[ 1625.467006][T15609] binder_alloc: binder_alloc_mmap_handler: 15607 20ff9000-20ffd000 already mapped failed -16
[ 1625.501410][T15608] binder: BINDER_SET_CONTEXT_MGR already set
[ 1625.511210][T15608] binder: 15607:15608 ioctl 40046207 0 returned -16
[ 1625.518235][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1625.540277][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:51 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:51 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:51 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 5:
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x2, 0x0, 0x0})

02:41:51 executing program 0:
r0 = timerfd_create(0x8, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:51 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1625.931028][T15632] binder: 15627:15632 ioctl c0306201 20000200 returned -14
[ 1625.965101][T15634] binder_alloc: binder_alloc_mmap_handler: 15627 20ff9000-20ffd000 already mapped failed -16
02:41:51 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 5:
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1625.976201][T15632] binder: BINDER_SET_CONTEXT_MGR already set
[ 1625.982748][T15632] binder: 15627:15632 ioctl 40046207 0 returned -16
[ 1625.998184][T15634] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1625.998192][T15634] binder_alloc: 15627: binder_alloc_buf, no vma
[ 1626.022939][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1626.048946][T15634] binder: 15627:15634 ioctl c0306201 20000200 returned -14
[ 1626.091481][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x3, 0x0, 0x0})

[ 1626.216663][T15643] binder: 15642:15643 ioctl c0306201 20000200 returned -14
[ 1626.226945][T15645] binder_alloc: binder_alloc_mmap_handler: 15642 20ff9000-20ffd000 already mapped failed -16
[ 1626.258238][T15643] binder: BINDER_SET_CONTEXT_MGR already set
[ 1626.275259][T15643] binder: 15642:15643 ioctl 40046207 0 returned -16
[ 1626.292980][T15645] binder_alloc: 15642: binder_alloc_buf, no vma
[ 1626.304453][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1626.311257][T15645] binder: 15642:15645 ioctl c0306201 20000200 returned -14
02:41:51 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 5:
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:51 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4, 0x0, 0x0})

02:41:51 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1626.469052][T15655] binder: 15653:15655 ioctl c0306201 20000200 returned -14
[ 1626.489507][T15655] binder: BINDER_SET_CONTEXT_MGR already set
[ 1626.496507][T15658] binder_alloc: 15653: binder_alloc_buf, no vma
[ 1626.503011][T15655] binder: 15653:15655 ioctl 40046207 0 returned -16
[ 1626.529948][T15658] binder: 15653:15658 ioctl c0306201 20000200 returned -14
02:41:52 executing program 0:
r0 = timerfd_create(0x8, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x5, 0x0, 0x0})

02:41:52 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:52 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:52 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1626.750984][T15672] binder: 15668:15672 ioctl c0306201 20000200 returned -14
02:41:52 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1626.797593][T15672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1626.813638][T15677] binder_alloc: 15668: binder_alloc_buf, no vma
[ 1626.825356][T15672] binder: 15668:15672 ioctl 40046207 0 returned -16
[ 1626.835673][T15677] binder: 15668:15677 ioctl c0306201 20000200 returned -14
02:41:52 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:52 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6, 0x0, 0x0})

02:41:52 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:52 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1627.107351][T15690] binder: 15686:15690 ioctl c0306201 20000200 returned -14
[ 1627.128703][T15690] binder: BINDER_SET_CONTEXT_MGR already set
[ 1627.148599][T15694] binder_alloc: 15686: binder_alloc_buf, no vma
02:41:52 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1627.159324][T15690] binder: 15686:15690 ioctl 40046207 0 returned -16
[ 1627.166045][T15694] binder: 15686:15694 ioctl c0306201 20000200 returned -14
02:41:53 executing program 0:
r0 = timerfd_create(0x8, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7, 0x0, 0x0})

02:41:53 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:53 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:53 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:53 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1627.659654][T15713] binder_transaction: 25 callbacks suppressed
[ 1627.659673][T15713] binder: 15706:15713 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1627.675870][T15713] binder: 15706:15713 ioctl c0306201 20000200 returned -14
[ 1627.685885][T15713] binder: BINDER_SET_CONTEXT_MGR already set
[ 1627.692273][T15718] binder_alloc: 15706: binder_alloc_buf, no vma
[ 1627.699084][T15713] binder: 15706:15713 ioctl 40046207 0 returned -16
02:41:53 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:53 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1627.705975][T15718] binder: 15706:15718 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1627.724114][T15718] binder: 15706:15718 ioctl c0306201 20000200 returned -14
02:41:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0xa, 0x0, 0x0})

02:41:53 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:53 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
ioctl$void(r0, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1627.947540][T15730] binder: 15728:15730 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1627.999574][T15730] binder: 15728:15730 ioctl c0306201 20000200 returned -14
[ 1628.042245][T15736] binder: BINDER_SET_CONTEXT_MGR already set
[ 1628.091898][T15736] binder: 15728:15736 ioctl 40046207 0 returned -16
02:41:53 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:53 executing program 0:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

02:41:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x48, 0x0, 0x0})

02:41:53 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0xc0045c79)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:53 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:53 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:53 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1628.519964][T15749] binder: 15747:15749 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:54 executing program 0:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

[ 1628.568290][T15749] binder: 15747:15749 ioctl c0306201 20000200 returned -14
[ 1628.595927][T15760] binder_alloc_mmap_handler: 5 callbacks suppressed
[ 1628.595944][T15760] binder_alloc: binder_alloc_mmap_handler: 15747 20ff9000-20ffd000 already mapped failed -16
02:41:54 executing program 0:
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

[ 1628.669526][T15749] binder: BINDER_SET_CONTEXT_MGR already set
[ 1628.675593][T15749] binder: 15747:15749 ioctl 40046207 0 returned -16
02:41:54 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1628.723616][T15764] binder_alloc: 15747: binder_alloc_buf, no vma
02:41:54 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

[ 1628.796131][T15764] binder: 15747:15764 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:54 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1628.837415][T15764] binder: 15747:15764 ioctl c0306201 20000200 returned -14
02:41:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4c, 0x0, 0x0})

02:41:54 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:54 executing program 3:
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1629.051693][T15777] binder: 15775:15777 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1629.131945][T15777] binder: 15775:15777 ioctl c0306201 20000200 returned -14
[ 1629.180368][T15783] binder_alloc: binder_alloc_mmap_handler: 15775 20ff9000-20ffd000 already mapped failed -16
[ 1629.210284][T15777] binder: BINDER_SET_CONTEXT_MGR already set
[ 1629.229021][T15777] binder: 15775:15777 ioctl 40046207 0 returned -16
[ 1629.246285][T15783] binder_alloc: 15775: binder_alloc_buf, no vma
[ 1629.266148][T15783] binder: 15775:15783 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1629.290703][T15783] binder: 15775:15783 ioctl c0306201 20000200 returned -14
02:41:54 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:54 executing program 0:
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:54 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:54 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x60, 0x0, 0x0})

02:41:54 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1629.417573][T15794] binder: 15792:15794 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1629.441930][T15794] binder: 15792:15794 ioctl c0306201 20000200 returned -14
02:41:54 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

[ 1629.471743][T15800] binder_alloc: binder_alloc_mmap_handler: 15792 20ff9000-20ffd000 already mapped failed -16
[ 1629.509081][T15794] binder: BINDER_SET_CONTEXT_MGR already set
02:41:55 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1629.533175][T15794] binder: 15792:15794 ioctl 40046207 0 returned -16
[ 1629.551921][T15800] binder_alloc: 15792: binder_alloc_buf, no vma
[ 1629.584513][T15800] binder: 15792:15800 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:55 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1629.625438][T15800] binder: 15792:15800 ioctl c0306201 20000200 returned -14
[ 1629.661982][ T8436] binder_release_work: 15 callbacks suppressed
[ 1629.661989][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x68, 0x0, 0x0})

[ 1629.793977][T15813] binder: 15812:15813 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:55 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1629.835587][T15813] binder: 15812:15813 ioctl c0306201 20000200 returned -14
[ 1629.872135][T15815] binder_alloc: binder_alloc_mmap_handler: 15812 20ff9000-20ffd000 already mapped failed -16
[ 1629.916539][T15813] binder: BINDER_SET_CONTEXT_MGR already set
[ 1629.968777][T15813] binder: 15812:15813 ioctl 40046207 0 returned -16
[ 1629.968812][T15818] binder_alloc: 15812: binder_alloc_buf, no vma
02:41:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1630.013930][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1630.026587][T15818] binder: 15812:15818 ioctl c0306201 20000200 returned -14
[ 1630.072171][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:55 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6c, 0x0, 0x0})

02:41:55 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:55 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1630.308267][T15833] binder: 15829:15833 ioctl c0306201 20000200 returned -14
02:41:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:55 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:55 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1630.348434][T15837] binder_alloc: binder_alloc_mmap_handler: 15829 20ff9000-20ffd000 already mapped failed -16
[ 1630.368716][T15833] binder: BINDER_SET_CONTEXT_MGR already set
[ 1630.377875][T15833] binder: 15829:15833 ioctl 40046207 0 returned -16
[ 1630.416733][T15837] binder: 15829:15837 ioctl c0306201 20000200 returned -14
[ 1630.424323][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:41:55 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1630.457178][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x74, 0x0, 0x0})

02:41:56 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1630.595564][T15852] binder: 15851:15852 ioctl c0306201 20000200 returned -14
[ 1630.618623][T15855] binder_alloc: binder_alloc_mmap_handler: 15851 20ff9000-20ffd000 already mapped failed -16
[ 1630.645077][T15852] binder: BINDER_SET_CONTEXT_MGR already set
[ 1630.672346][T15852] binder: 15851:15852 ioctl 40046207 0 returned -16
[ 1630.692286][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1630.699507][T15855] binder: 15851:15855 ioctl c0306201 20000200 returned -14
[ 1630.716771][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:41:56 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:56 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7a, 0x0, 0x0})

02:41:56 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1630.961706][T15868] binder: 15865:15868 ioctl c0306201 20000200 returned -14
[ 1630.998818][T15872] binder_alloc: binder_alloc_mmap_handler: 15865 20ff9000-20ffd000 already mapped failed -16
02:41:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1631.025274][T15868] binder: BINDER_SET_CONTEXT_MGR already set
[ 1631.068279][T15868] binder: 15865:15868 ioctl 40046207 0 returned -16
[ 1631.088167][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1631.094906][T15872] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1631.094915][T15872] binder_alloc: 15865: binder_alloc_buf, no vma
[ 1631.125122][T15872] binder: 15865:15872 ioctl c0306201 20000200 returned -14
[ 1631.147142][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:41:56 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:56 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x300, 0x0, 0x0})

02:41:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1631.349594][T15888] binder: 15886:15888 ioctl c0306201 20000200 returned -14
[ 1631.371014][T15890] binder_alloc: binder_alloc_mmap_handler: 15886 20ff9000-20ffd000 already mapped failed -16
02:41:56 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1631.396735][T15888] binder: BINDER_SET_CONTEXT_MGR already set
[ 1631.403423][T15888] binder: 15886:15888 ioctl 40046207 0 returned -16
[ 1631.426425][T15890] binder_alloc: 15886: binder_alloc_buf, no vma
02:41:56 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1631.445219][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1631.454765][T15890] binder: 15886:15890 ioctl c0306201 20000200 returned -14
02:41:57 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x500, 0x0, 0x0})

02:41:57 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x0, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1631.721631][T15906] binder: 15905:15906 ioctl c0306201 20000200 returned -14
[ 1631.748984][T15915] binder_alloc: binder_alloc_mmap_handler: 15905 20ff9000-20ffd000 already mapped failed -16
02:41:57 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1631.794565][T15906] binder: BINDER_SET_CONTEXT_MGR already set
[ 1631.823205][T15906] binder: 15905:15906 ioctl 40046207 0 returned -16
[ 1631.823647][T15921] binder_alloc: 15905: binder_alloc_buf, no vma
[ 1631.886009][T15921] binder: 15905:15921 ioctl c0306201 20000200 returned -14
02:41:57 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:57 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x600, 0x0, 0x0})

02:41:57 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:57 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1632.221298][T15932] binder: 15931:15932 ioctl c0306201 20000200 returned -14
[ 1632.256877][T15942] binder_alloc: binder_alloc_mmap_handler: 15931 20ff9000-20ffd000 already mapped failed -16
02:41:57 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1632.300229][T15932] binder: BINDER_SET_CONTEXT_MGR already set
[ 1632.319561][T15932] binder: 15931:15932 ioctl 40046207 0 returned -16
[ 1632.320501][T15948] binder_alloc: 15931: binder_alloc_buf, no vma
[ 1632.464022][T15948] binder: 15931:15948 ioctl c0306201 20000200 returned -14
02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x700, 0x0, 0x0})

[ 1632.661098][T15963] binder: 15962:15963 ioctl c0306201 20000200 returned -14
[ 1632.699018][T15966] binder: BINDER_SET_CONTEXT_MGR already set
02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1632.719388][T15966] binder: 15962:15966 ioctl 40046207 0 returned -16
[ 1632.733206][T15967] binder_alloc: 15962: binder_alloc_buf, no vma
[ 1632.752270][T15967] binder_transaction: 14 callbacks suppressed
[ 1632.752290][T15967] binder: 15962:15967 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:58 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1632.828421][T15967] binder: 15962:15967 ioctl c0306201 20000200 returned -14
02:41:58 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0xa00, 0x0, 0x0})

02:41:58 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:58 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1633.114578][T15985] binder: 15984:15985 transaction failed 29201/-22, size 0--549755813892 line 3147
02:41:58 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

[ 1633.171694][T15985] binder: 15984:15985 ioctl c0306201 20000200 returned -14
[ 1633.203685][T15985] binder: BINDER_SET_CONTEXT_MGR already set
02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1633.249405][T15985] binder: 15984:15985 ioctl 40046207 0 returned -16
02:41:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x2000, 0x0, 0x0})

[ 1633.292508][T15992] binder: 15984:15992 transaction failed 29189/-22, size 0--549755813892 line 2994
[ 1633.329152][T15992] binder: 15984:15992 ioctl c0306201 20000200 returned -14
02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1633.435870][T16003] binder: 16002:16003 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1633.477815][T16003] binder: 16002:16003 ioctl c0306201 20000200 returned -14
02:41:58 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, 0x0, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1633.518120][T16003] binder: BINDER_SET_CONTEXT_MGR already set
[ 1633.595227][T16003] binder: 16002:16003 ioctl 40046207 0 returned -16
[ 1633.616291][T16007] binder: 16002:16007 transaction failed 29189/-22, size 0--549755813892 line 2994
02:41:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1633.693049][T16007] binder: 16002:16007 ioctl c0306201 20000200 returned -14
02:41:59 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/71, 0x47)

02:41:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4800, 0x0, 0x0})

02:41:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

02:41:59 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:59 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

[ 1634.017436][T16020] binder: 16019:16020 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1634.065408][T16020] binder: 16019:16020 ioctl c0306201 20000200 returned -14
02:41:59 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:41:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1634.108840][T16029] binder_alloc_mmap_handler: 3 callbacks suppressed
[ 1634.108856][T16029] binder_alloc: binder_alloc_mmap_handler: 16019 20ff9000-20ffd000 already mapped failed -16
[ 1634.249503][T16020] binder: BINDER_SET_CONTEXT_MGR already set
[ 1634.277009][T16020] binder: 16019:16020 ioctl 40046207 0 returned -16
[ 1634.277084][T16037] binder_alloc: 16019: binder_alloc_buf, no vma
[ 1634.329520][T16037] binder: 16019:16037 transaction failed 29189/-3, size 0--549755813892 line 3147
02:41:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1634.374927][T16037] binder: 16019:16037 ioctl c0306201 20000200 returned -14
02:41:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4c00, 0x0, 0x0})

02:42:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1634.614696][T16044] binder: 16043:16044 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1634.668705][T16044] binder: 16043:16044 ioctl c0306201 20000200 returned -14
[ 1634.715755][T16048] binder_alloc: binder_alloc_mmap_handler: 16043 20ff9000-20ffd000 already mapped failed -16
02:42:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1fe, 0x400000000000)

[ 1634.783384][T16044] binder: BINDER_SET_CONTEXT_MGR already set
02:42:00 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:00 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

[ 1634.827163][T16044] binder: 16043:16044 ioctl 40046207 0 returned -16
[ 1634.827183][T16050] binder_alloc: 16043: binder_alloc_buf, no vma
[ 1634.885539][ T8436] binder_release_work: 13 callbacks suppressed
[ 1634.885547][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1634.956830][T16050] binder: 16043:16050 transaction failed 29189/-3, size 0--549755813892 line 3147
02:42:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, 0x0, 0x0, 0x400000000000)

02:42:00 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

[ 1635.005789][T16050] binder: 16043:16050 ioctl c0306201 20000200 returned -14
[ 1635.059557][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:42:00 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6000, 0x0, 0x0})

02:42:00 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, 0x0, 0x0, 0x400000000000)

02:42:00 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(0xffffffffffffffff, &(0x7f0000000040)=""/71, 0x47)

[ 1635.242856][T16070] binder: 16069:16070 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1635.302184][T16070] binder: 16069:16070 ioctl c0306201 20000200 returned -14
02:42:00 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, 0x0, 0x0)

02:42:00 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, 0x0, 0x0, 0x400000000000)

[ 1635.343972][T16079] binder_alloc: binder_alloc_mmap_handler: 16069 20ff9000-20ffd000 already mapped failed -16
[ 1635.389573][T16070] binder: BINDER_SET_CONTEXT_MGR already set
[ 1635.422127][T16070] binder: 16069:16070 ioctl 40046207 0 returned -16
02:42:00 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, 0x0, 0x0)

[ 1635.492621][T16085] binder_alloc: 16069: binder_alloc_buf, no vma
[ 1635.507169][T16085] binder: 16069:16085 ioctl c0306201 20000200 returned -14
[ 1635.537099][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1635.566912][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:42:01 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

02:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6800, 0x0, 0x0})

02:42:01 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:01 executing program 0:
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f00000000c0)={{0x2400000000000000}, {0x0, 0x1c9c380}}, 0x0)
read(r0, 0x0, 0x0)

[ 1635.711761][T16092] binder: 16090:16092 ioctl c0306201 20000200 returned -14
[ 1635.752407][T16097] binder_alloc: binder_alloc_mmap_handler: 16090 20ff9000-20ffd000 already mapped failed -16
[ 1635.819742][T16092] binder: BINDER_SET_CONTEXT_MGR already set
[ 1635.825800][T16092] binder: 16090:16092 ioctl 40046207 0 returned -16
[ 1635.825822][T16097] binder_alloc: 16090: binder_alloc_buf, no vma
[ 1635.855442][T16097] binder: 16090:16097 ioctl c0306201 20000200 returned -14
02:42:01 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:01 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x3, 0xb)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x0, 0x0, 0xff, 0x8001}, 0x20)

02:42:01 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

[ 1635.867326][ T8436] binder: undelivered TRANSACTION_ERROR: 29201
[ 1635.874272][ T8436] binder: undelivered TRANSACTION_ERROR: 29189
02:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6c00, 0x0, 0x0})

02:42:01 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bc070")
r1 = socket$inet6(0xa, 0x80000000001, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r1, 0x8)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1636.010204][T16115] binder: 16114:16115 ioctl c0306201 20000200 returned -14
02:42:01 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x80003, 0xff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d!LA\xe3\xc3\v\xa3\xcf\xe0\xac\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8A|\xc3g\x96\x98:\\\x15\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8')
sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0)
preadv(r0, &(0x7f00000017c0), 0x1fe, 0x0)

[ 1636.051030][T16117] binder_alloc: binder_alloc_mmap_handler: 16114 20ff9000-20ffd000 already mapped failed -16
[ 1636.119945][T16117] binder_alloc: 16114: binder_alloc_buf, no vma
[ 1636.152407][T16124] binder: BINDER_SET_CONTEXT_MGR already set
02:42:01 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000dc9ff0)={0x2, 0x4e20, @local}, 0x45)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
gettid()
getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@local, @in6=@remote}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8)
socketpair(0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000100)="fedb1e123c123f319bc070")
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x207)
getsockopt$inet6_buf(r2, 0x29, 0x2b, &(0x7f0000000040)=""/47, &(0x7f0000000240)=0x2f)
sendto$inet(r0, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000280), 0xfffffffffffffedd, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)

[ 1636.171807][T16117] binder: 16114:16117 ioctl c0306201 20000200 returned -14
[ 1636.198120][T16124] binder: 16114:16124 ioctl 40046207 0 returned -16
[ 1636.198163][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
02:42:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7400, 0x0, 0x0})

[ 1636.249316][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
02:42:01 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x2c)
close(r0)

[ 1636.370324][T16131] binder: 16130:16131 ioctl c0306201 20000200 returned -14
[ 1636.408489][T16133] binder_alloc: binder_alloc_mmap_handler: 16130 20ff9000-20ffd000 already mapped failed -16
[ 1636.436610][T16131] binder: BINDER_SET_CONTEXT_MGR already set
[ 1636.464873][T16131] binder: 16130:16131 ioctl 40046207 0 returned -16
[ 1636.497289][T16135] binder_alloc: 16130: binder_alloc_buf, no vma
[ 1636.504377][T16135] binder: 16130:16135 ioctl c0306201 20000200 returned -14
[ 1636.535953][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1636.546329][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
02:42:02 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:02 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x7)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b02fc7735cf6aa0c41c489fa206f71a223306865b6ffffb960b10002000000000000fa4b46299e1b010400002000003cb46f0074"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

02:42:02 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:02 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:02 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket(0x840000000002, 0x3, 0x9)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10)
setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0xffffffffffff38e3, 0x4)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0x400800032, 0x4)
connect$inet(r0, &(0x7f0000593000)={0x2, 0x0, @broadcast}, 0x10)
write$binfmt_elf64(r1, 0x0, 0x0)

02:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7a00, 0x0, 0x0})

[ 1636.662211][T16145] binder: 16143:16145 ioctl c0306201 20000200 returned -14
[ 1636.706021][T16151] binder_alloc: binder_alloc_mmap_handler: 16143 20ff9000-20ffd000 already mapped failed -16
[ 1636.745957][T16145] binder: BINDER_SET_CONTEXT_MGR already set
02:42:02 executing program 3:
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000380)='oom_score\x00')
fstatfs(r1, 0x0)
preadv(r3, &(0x7f0000000480), 0x1000000000000237, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
ioctl$KIOCSOUND(r3, 0x4b2f, 0x7)
dup2(r0, r2)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f00000003c0)={0x80, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x4, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @rand_addr=0xff}}]}, 0x290)

[ 1636.767825][T16145] binder: 16143:16145 ioctl 40046207 0 returned -16
02:42:02 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x7)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b02fc7735cf6aa0c41c489fa206f71a223306865b6ffffb960b10002000000000000fa4b46299e1b010400002000003cb46f0074"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1636.810074][T16151] binder: 16143:16151 ioctl c0306201 20000200 returned -14
02:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x1000000, 0x0, 0x0})

02:42:02 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1, 0x3)
clone(0x200, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x103c, 0x0)
execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
r1 = gettid()
tkill(r1, 0x1000000000016)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)

02:42:02 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x7)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b02fc7735cf6aa0c41c489fa206f71a223306865b6ffffb960b10002000000000000fa4b46299e1b010400002000003cb46f0074"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1636.995105][T16171] binder: 16170:16171 ioctl c0306201 20000200 returned -14
[ 1637.033456][T16173] binder_alloc: binder_alloc_mmap_handler: 16170 20ff9000-20ffd000 already mapped failed -16
[ 1637.069669][T16171] binder: BINDER_SET_CONTEXT_MGR already set
[ 1637.086301][T16173] binder_alloc: 16170: binder_alloc_buf, no vma
[ 1637.114871][T16171] binder: 16170:16171 ioctl 40046207 0 returned -16
[ 1637.139754][T16173] binder: 16170:16173 ioctl c0306201 20000200 returned -14
[ 1637.160156][T16176] 
[ 1637.162519][T16176] ======================================================
[ 1637.169530][T16176] WARNING: possible circular locking dependency detected
[ 1637.178014][T16176] 5.1.0-rc1+ #33 Not tainted
[ 1637.182602][T16176] ------------------------------------------------------
[ 1637.189792][T16176] syz-executor.3/16176 is trying to acquire lock:
[ 1637.196201][T16176] 000000009b2ebcee (&pipe->mutex/1){+.+.}, at: fifo_open+0x159/0xb00
[ 1637.200999][T16182] binder: 16181:16182 ioctl c0306201 20000200 returned -14
[ 1637.204399][T16176] 
[ 1637.204399][T16176] but task is already holding lock:
[ 1637.204406][T16176] 00000000701c694d (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0
[ 1637.204441][T16176] 
[ 1637.204441][T16176] which lock already depends on the new lock.
[ 1637.204441][T16176] 
[ 1637.204446][T16176] 
[ 1637.204446][T16176] the existing dependency chain (in reverse order) is:
[ 1637.204451][T16176] 
[ 1637.204451][T16176] -> #1 (&sig->cred_guard_mutex){+.+.}:
[ 1637.256233][T16176]        lock_acquire+0x16f/0x3f0
[ 1637.261258][T16176]        __mutex_lock+0xf7/0x1310
[ 1637.266279][T16176]        mutex_lock_interruptible_nested+0x16/0x20
[ 1637.272847][T16176]        proc_pid_attr_write+0x200/0x580
[ 1637.278479][T16176]        __vfs_write+0x8d/0x110
[ 1637.283320][T16176]        __kernel_write+0x110/0x3b0
[ 1637.289135][T16176]        write_pipe_buf+0x15d/0x1f0
[ 1637.294332][T16176]        __splice_from_pipe+0x395/0x7d0
[ 1637.299870][T16176]        splice_from_pipe+0x108/0x170
[ 1637.305234][T16176]        default_file_splice_write+0x3c/0x90
[ 1637.311226][T16176]        do_splice+0x70a/0x13c0
[ 1637.316075][T16176]        __x64_sys_splice+0x2c6/0x330
[ 1637.321463][T16176]        do_syscall_64+0x103/0x610
[ 1637.326569][T16176]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1637.333051][T16176] 
[ 1637.333051][T16176] -> #0 (&pipe->mutex/1){+.+.}:
[ 1637.340096][T16176]        __lock_acquire+0x239c/0x3fb0
[ 1637.345457][T16176]        lock_acquire+0x16f/0x3f0
[ 1637.350474][T16176]        __mutex_lock+0xf7/0x1310
[ 1637.355489][T16176]        mutex_lock_nested+0x16/0x20
[ 1637.360853][T16176]        fifo_open+0x159/0xb00
[ 1637.365608][T16176]        do_dentry_open+0x488/0x1160
[ 1637.370883][T16176]        vfs_open+0xa0/0xd0
[ 1637.375382][T16176]        path_openat+0x10e9/0x46e0
[ 1637.380485][T16176]        do_filp_open+0x1a1/0x280
[ 1637.385504][T16176]        do_open_execat+0x137/0x690
[ 1637.390698][T16176]        __do_execve_file.isra.0+0x178d/0x23f0
[ 1637.396863][T16176]        __x64_sys_execve+0x8f/0xc0
[ 1637.402056][T16176]        do_syscall_64+0x103/0x610
[ 1637.407169][T16176]        entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1637.413586][T16176] 
[ 1637.413586][T16176] other info that might help us debug this:
[ 1637.413586][T16176] 
[ 1637.423897][T16176]  Possible unsafe locking scenario:
[ 1637.423897][T16176] 
[ 1637.431355][T16176]        CPU0                    CPU1
[ 1637.436706][T16176]        ----                    ----
[ 1637.442067][T16176]   lock(&sig->cred_guard_mutex);
[ 1637.447086][T16176]                                lock(&pipe->mutex/1);
[ 1637.453937][T16176]                                lock(&sig->cred_guard_mutex);
[ 1637.461470][T16176]   lock(&pipe->mutex/1);
[ 1637.465791][T16176] 
[ 1637.465791][T16176]  *** DEADLOCK ***
[ 1637.465791][T16176] 
[ 1637.473930][T16176] 1 lock held by syz-executor.3/16176:
[ 1637.479369][T16176]  #0: 00000000701c694d (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x23f0
[ 1637.489879][T16176] 
[ 1637.489879][T16176] stack backtrace:
[ 1637.495852][T16176] CPU: 0 PID: 16176 Comm: syz-executor.3 Not tainted 5.1.0-rc1+ #33
[ 1637.503816][T16176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1637.513859][T16176] Call Trace:
[ 1637.517152][T16176]  dump_stack+0x172/0x1f0
[ 1637.521504][T16176]  print_circular_bug.isra.0.cold+0x1cc/0x28f
[ 1637.527569][T16176]  check_prev_add.constprop.0+0xf11/0x23c0
[ 1637.533387][T16176]  ? depot_save_stack+0x1de/0x460
[ 1637.538492][T16176]  ? check_usage+0x570/0x570
[ 1637.543081][T16176]  ? mark_held_locks+0xa4/0xf0
[ 1637.547838][T16176]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 1637.553639][T16176]  ? graph_lock+0x7b/0x200
[ 1637.558044][T16176]  ? __lockdep_reset_lock+0x450/0x450
[ 1637.563423][T16176]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1637.569655][T16176]  __lock_acquire+0x239c/0x3fb0
[ 1637.574502][T16176]  ? save_stack+0xa9/0xd0
[ 1637.578827][T16176]  ? mark_held_locks+0xf0/0xf0
[ 1637.583587][T16176]  lock_acquire+0x16f/0x3f0
[ 1637.588092][T16176]  ? fifo_open+0x159/0xb00
[ 1637.592503][T16176]  ? fifo_open+0x159/0xb00
[ 1637.596911][T16176]  __mutex_lock+0xf7/0x1310
[ 1637.601405][T16176]  ? fifo_open+0x159/0xb00
[ 1637.605815][T16176]  ? fifo_open+0x159/0xb00
[ 1637.610228][T16176]  ? fifo_open+0x2b5/0xb00
[ 1637.614636][T16176]  ? mutex_trylock+0x1e0/0x1e0
[ 1637.619395][T16176]  ? fifo_open+0x2b5/0xb00
[ 1637.623803][T16176]  ? kasan_check_write+0x14/0x20
[ 1637.628730][T16176]  ? lock_downgrade+0x880/0x880
[ 1637.633577][T16176]  mutex_lock_nested+0x16/0x20
[ 1637.638337][T16176]  ? mutex_lock_nested+0x16/0x20
[ 1637.643267][T16176]  fifo_open+0x159/0xb00
[ 1637.647504][T16176]  do_dentry_open+0x488/0x1160
[ 1637.652263][T16176]  ? pipe_release+0x280/0x280
[ 1637.656934][T16176]  ? chown_common+0x5c0/0x5c0
[ 1637.661616][T16176]  ? inode_permission+0xb4/0x570
[ 1637.666549][T16176]  vfs_open+0xa0/0xd0
[ 1637.670526][T16176]  path_openat+0x10e9/0x46e0
[ 1637.675113][T16176]  ? path_lookupat.isra.0+0x8d0/0x8d0
[ 1637.680473][T16176]  ? __kmalloc+0x15c/0x740
[ 1637.684971][T16176]  ? prepare_creds+0x2f5/0x3f0
[ 1637.689743][T16176]  ? prepare_exec_creds+0x12/0xf0
[ 1637.694769][T16176]  ? __do_execve_file.isra.0+0x393/0x23f0
[ 1637.700481][T16176]  ? do_syscall_64+0x103/0x610
[ 1637.705236][T16176]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1637.711298][T16176]  ? __lock_acquire+0x548/0x3fb0
[ 1637.716235][T16176]  ? prepare_exec_creds+0x12/0xf0
[ 1637.721265][T16176]  do_filp_open+0x1a1/0x280
[ 1637.725759][T16176]  ? may_open_dev+0x100/0x100
[ 1637.730437][T16176]  ? __lock_acquire+0x548/0x3fb0
[ 1637.735378][T16176]  do_open_execat+0x137/0x690
[ 1637.740087][T16176]  ? unregister_binfmt+0x170/0x170
[ 1637.745201][T16176]  ? lock_downgrade+0x880/0x880
[ 1637.750048][T16176]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1637.756296][T16176]  ? kasan_check_read+0x11/0x20
[ 1637.761147][T16176]  ? do_raw_spin_unlock+0x57/0x270
[ 1637.766257][T16176]  __do_execve_file.isra.0+0x178d/0x23f0
[ 1637.771882][T16176]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[ 1637.777598][T16176]  ? copy_strings_kernel+0x110/0x110
[ 1637.782878][T16176]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1637.789113][T16176]  ? getname_flags+0x277/0x5b0
[ 1637.793879][T16176]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1637.799965][T16176]  __x64_sys_execve+0x8f/0xc0
[ 1637.804639][T16176]  do_syscall_64+0x103/0x610
[ 1637.809227][T16176]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1637.815110][T16176] RIP: 0033:0x458209
[ 1637.818997][T16176] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1637.838600][T16176] RSP: 002b:00007fab02b90c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[ 1637.847006][T16176] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209
[ 1637.855053][T16176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280
02:42:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x2000000, 0x0, 0x0})

[ 1637.863021][T16176] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1637.870982][T16176] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fab02b916d4
[ 1637.878946][T16176] R13: 00000000004be753 R14: 00000000004cf080 R15: 00000000ffffffff
[ 1637.899938][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1637.907109][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1637.914657][T16183] binder_alloc: binder_alloc_mmap_handler: 16181 20ff9000-20ffd000 already mapped failed -16
[ 1637.953152][T16182] binder: BINDER_SET_CONTEXT_MGR already set
02:42:03 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:03 executing program 0:
clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x7)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8f1b02fc7735cf6aa0c41c489fa206f71a223306865b6ffffb960b10002000000000000fa4b46299e1b010400002000003cb46f0074"], 0x39)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0))
ptrace$cont(0x7, r0, 0x0, 0x0)

[ 1637.966745][T16182] binder: 16181:16182 ioctl 40046207 0 returned -16
[ 1637.978714][T16183] binder_alloc: 16181: binder_alloc_buf, no vma
[ 1637.981086][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1637.985934][T16183] binder_transaction: 12 callbacks suppressed
[ 1637.985951][T16183] binder: 16181:16183 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1638.019506][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:03 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:03 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x4)

02:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x3000000, 0x0, 0x0})

[ 1638.067405][T16183] binder: 16181:16183 ioctl c0306201 20000200 returned -14
[ 1638.090656][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1638.120580][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1638.137364][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1638.151383][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1638.151865][T16193] ptrace attach of ""[16192] was attempted by "/root/syz-executor.3"[16193]
02:42:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070")
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000280)=""/33, 0x21}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x3, 0x0)

[ 1638.188474][T16284] binder: 16282:16284 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1638.202939][T16284] binder: 16282:16284 ioctl c0306201 20000200 returned -14
[ 1638.213872][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1638.214142][T16305] binder_alloc: binder_alloc_mmap_handler: 16282 20ff9000-20ffd000 already mapped failed -16
[ 1638.231502][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1638.234769][T16284] binder: BINDER_SET_CONTEXT_MGR already set
[ 1638.248416][T16284] binder: 16282:16284 ioctl 40046207 0 returned -16
[ 1638.264820][T16305] binder_alloc: 16282: binder_alloc_buf, no vma
02:42:03 executing program 3:
syz_open_dev$vcsa(0x0, 0x0, 0x200)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x1, 0x0, "ffd5b313c018ca9fdc3729231a7282812c3967716fa59ee69cafa44967977d0ba0cf5af65669a7e2a347e9ce364467e2e098d3dddf408611f3791b8b1a9a7998b9f00be8f4025216e577c9d37eb1d19e"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x7, 0x0, "4877bb1f56d48eb1fa5fac76a792a929a57f6062b013ec6b7a9ee231ea85a1c7f5c8fdf3bcaf6c5bb203dab4011d7c6096609012d3e979195204ae936681b23832f302a5020f3f6af0b1d2fb5a00eb09"}, 0xd8)
dup3(r0, r1, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x0)

[ 1638.299932][T16305] binder: 16282:16305 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1638.317689][T16305] binder: 16282:16305 ioctl c0306201 20000200 returned -14
[ 1638.321413][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4000000, 0x0, 0x0})

[ 1638.342745][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:03 executing program 3:

[ 1638.384198][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1638.385095][T16315] binder: 16312:16315 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1638.415478][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1638.433373][T16315] binder: 16312:16315 ioctl c0306201 20000200 returned -14
[ 1638.463199][T16315] binder: BINDER_SET_CONTEXT_MGR already set
02:42:03 executing program 2:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000080)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:03 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:03 executing program 3:

[ 1638.488748][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1638.496229][T16315] binder: 16312:16315 ioctl 40046207 0 returned -16
[ 1638.505729][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:04 executing program 3:

[ 1638.532999][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1638.539660][T16319] binder_alloc: 16312: binder_alloc_buf, no vma
[ 1638.556941][T16319] binder: 16312:16319 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1638.563198][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1638.587215][T16319] binder: 16312:16319 ioctl c0306201 20000200 returned -14
[ 1638.665816][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1638.677838][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1638.702301][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1638.711974][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1638.739983][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1638.747288][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1638.806419][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1638.816885][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:06 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

02:42:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x5000000, 0x0, 0x0})

02:42:06 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:06 executing program 3:

02:42:06 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:06 executing program 2:

02:42:06 executing program 2:

02:42:06 executing program 3:

02:42:06 executing program 3:

[ 1641.076608][T16341] binder: 16340:16341 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1641.088727][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1641.105391][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:06 executing program 2:

[ 1641.128837][T16341] binder: 16340:16341 ioctl c0306201 20000200 returned -14
[ 1641.137240][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1641.159149][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.179888][T16352] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1641.179905][T16352] binder_alloc: binder_alloc_mmap_handler: 16340 20ff9000-20ffd000 already mapped failed -16
[ 1641.207524][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
02:42:06 executing program 2:

02:42:06 executing program 3:

[ 1641.228655][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.256908][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1641.267421][T16341] binder: BINDER_SET_CONTEXT_MGR already set
[ 1641.288851][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1641.295504][T16341] binder: 16340:16341 ioctl 40046207 0 returned -16
02:42:06 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

[ 1641.329412][T16358] binder_alloc: 16340: binder_alloc_buf, no vma
[ 1641.333769][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1641.351604][T16358] binder: 16340:16358 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1641.374546][ T9824] binder_release_work: 10 callbacks suppressed
[ 1641.374554][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1641.375465][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.381386][T16358] binder: 16340:16358 ioctl c0306201 20000200 returned -14
02:42:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6000000, 0x0, 0x0})

02:42:06 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:06 executing program 3:

02:42:06 executing program 2:

02:42:06 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:06 executing program 3:

02:42:06 executing program 2:

02:42:06 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

[ 1641.439654][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1641.456719][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1641.477425][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1641.538152][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1641.553697][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1641.554867][T16369] binder: 16368:16369 transaction failed 29201/-22, size 0--549755813892 line 3147
02:42:07 executing program 2:

02:42:07 executing program 3:

[ 1641.585503][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1641.607524][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

02:42:07 executing program 3:

[ 1641.638531][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1641.657656][T16369] binder: 16368:16369 ioctl c0306201 20000200 returned -14
[ 1641.661397][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.714861][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1641.729446][T16380] binder_alloc: binder_alloc_mmap_handler: 16368 20ff9000-20ffd000 already mapped failed -16
[ 1641.741092][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.773187][T16369] binder: BINDER_SET_CONTEXT_MGR already set
[ 1641.782643][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1641.787390][T16369] binder: 16368:16369 ioctl 40046207 0 returned -16
[ 1641.802363][T16384] binder_alloc: 16368: binder_alloc_buf, no vma
[ 1641.803235][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1641.808645][T16384] binder: 16368:16384 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1641.808685][T16384] binder: 16368:16384 ioctl c0306201 20000200 returned -14
[ 1641.838560][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1641.845935][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
[ 1641.850418][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
02:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7000000, 0x0, 0x0})

02:42:07 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x4)

02:42:07 executing program 2:

02:42:07 executing program 3:

02:42:07 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

[ 1641.869647][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1641.895280][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:07 executing program 3:

02:42:07 executing program 2:

[ 1641.940425][T16394] binder: 16385:16394 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1641.947776][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1641.965297][T16394] binder: 16385:16394 ioctl c0306201 20000200 returned -14
02:42:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:07 executing program 2:

[ 1641.987279][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1642.005878][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:07 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1642.031985][T16400] binder_alloc: binder_alloc_mmap_handler: 16385 20ff9000-20ffd000 already mapped failed -16
[ 1642.070743][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1642.073512][T16394] binder: BINDER_SET_CONTEXT_MGR already set
[ 1642.085568][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1642.105171][T16406] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
02:42:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

[ 1642.117325][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1642.128622][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1642.140080][T16394] binder: 16385:16394 ioctl 40046207 0 returned -16
[ 1642.147630][T16407] binder_alloc: 16385: binder_alloc_buf, no vma
[ 1642.154852][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1642.162850][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1642.188176][T16407] binder: 16385:16407 ioctl c0306201 20000200 returned -14
[ 1642.212319][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
02:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0xa000000, 0x0, 0x0})

[ 1642.263838][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
[ 1642.293470][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1642.305017][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1642.333100][T16419] binder: 16418:16419 ioctl c0306201 20000200 returned -14
[ 1642.347558][T16422] binder_alloc: binder_alloc_mmap_handler: 16418 20ff9000-20ffd000 already mapped failed -16
[ 1642.358295][T16419] binder: BINDER_SET_CONTEXT_MGR already set
02:42:07 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:07 executing program 2:

02:42:07 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:07 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

[ 1642.372118][T16419] binder: 16418:16419 ioctl 40046207 0 returned -16
[ 1642.372151][T16422] binder_alloc: 16418: binder_alloc_buf, no vma
[ 1642.382077][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
02:42:07 executing program 2:

[ 1642.416930][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1642.423939][T16426] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 1642.427583][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1642.450487][T16422] binder: 16418:16422 ioctl c0306201 20000200 returned -14
02:42:07 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x20000000, 0x0, 0x0})

02:42:07 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1642.470786][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1642.480899][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
[ 1642.493268][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:08 executing program 2:

[ 1642.541150][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1642.567427][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1642.580449][T16441] binder: 16437:16441 ioctl c0306201 20000200 returned -14
02:42:08 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

[ 1642.591143][T16440] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
[ 1642.611215][T16445] binder_alloc: binder_alloc_mmap_handler: 16437 20ff9000-20ffd000 already mapped failed -16
[ 1642.613641][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:08 executing program 2:

[ 1642.649351][T16441] binder: BINDER_SET_CONTEXT_MGR already set
[ 1642.658295][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1642.686403][T16441] binder: 16437:16441 ioctl 40046207 0 returned -16
[ 1642.697723][ T9824] binder: undelivered TRANSACTION_ERROR: 29201
[ 1642.702385][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1642.708344][T16445] binder_alloc: 16437: binder_alloc_buf, no vma
[ 1642.717514][T16445] binder: 16437:16445 ioctl c0306201 20000200 returned -14
[ 1642.730741][ T9824] binder: undelivered TRANSACTION_ERROR: 29189
[ 1642.737392][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1642.772394][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1642.793694][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1642.808163][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
02:42:08 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:08 executing program 2:

02:42:08 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x48000000, 0x0, 0x0})

02:42:08 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

[ 1642.815805][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1642.829840][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1642.842281][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1642.858913][T16457] TCP: request_sock_TCPv6: Possible SYN flooding on port 20000. Sending cookies.  Check SNMP counters.
02:42:08 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:08 executing program 2:

[ 1642.877446][T16455] binder: 16452:16455 ioctl c0306201 20000200 returned -14
[ 1642.900020][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1642.908909][T16462] binder_alloc: binder_alloc_mmap_handler: 16452 20ff9000-20ffd000 already mapped failed -16
[ 1642.909932][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
02:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:08 executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

[ 1642.959424][T16455] binder: BINDER_SET_CONTEXT_MGR already set
[ 1642.985989][T16455] binder: 16452:16455 ioctl 40046207 0 returned -16
[ 1642.986008][T16469] binder_alloc: 16452: binder_alloc_buf, no vma
02:42:08 executing program 2:

[ 1643.014051][T16469] binder_transaction: 6 callbacks suppressed
[ 1643.014082][T16469] binder: 16452:16469 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1643.033636][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1643.063644][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1643.085206][T16469] binder: 16452:16469 ioctl c0306201 20000200 returned -14
02:42:08 executing program 2:

[ 1643.108379][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1643.129673][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1643.163145][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1643.189931][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:08 executing program 5:
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
ioctl$void(0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x4c000000, 0x0, 0x0})

02:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:08 executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

02:42:08 executing program 2:

02:42:08 executing program 1:

[ 1643.210339][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1643.217521][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:08 executing program 1:

02:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1643.275961][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1643.310462][T16485] binder: 16483:16485 transaction failed 29201/-22, size 0--549755813892 line 3147
02:42:08 executing program 2:

02:42:08 executing program 0:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x0, 0x100000000})

[ 1643.338396][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1643.345177][T16485] binder: 16483:16485 ioctl c0306201 20000200 returned -14
02:42:08 executing program 1:

[ 1643.382597][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1643.414961][T16498] binder_alloc: binder_alloc_mmap_handler: 16483 20ff9000-20ffd000 already mapped failed -16
02:42:08 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1643.415935][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1643.455618][T16485] binder: BINDER_SET_CONTEXT_MGR already set
[ 1643.472181][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1643.480238][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1643.481013][T16485] binder: 16483:16485 ioctl 40046207 0 returned -16
[ 1643.490978][T16505] binder_alloc: 16483: binder_alloc_buf, no vma
[ 1643.507968][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1643.515976][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1643.526365][T16505] binder: 16483:16505 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1643.547583][T16505] binder: 16483:16505 ioctl c0306201 20000200 returned -14
[ 1643.556573][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1643.566138][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x60000000, 0x0, 0x0})

02:42:09 executing program 2:

02:42:09 executing program 1:

02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

02:42:09 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1643.599502][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1643.606670][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:09 executing program 5:

02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

02:42:09 executing program 2:

[ 1643.650992][T16512] binder: 16511:16512 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1643.660009][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1643.667446][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1643.675612][T16512] binder: 16511:16512 ioctl c0306201 20000200 returned -14
02:42:09 executing program 5:

02:42:09 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:09 executing program 1:

[ 1643.716895][T16520] binder_alloc: binder_alloc_mmap_handler: 16511 20ff9000-20ffd000 already mapped failed -16
[ 1643.733572][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1643.749816][T16512] binder: BINDER_SET_CONTEXT_MGR already set
02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, 0x0)

[ 1643.782250][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1643.788395][T16512] binder: 16511:16512 ioctl 40046207 0 returned -16
[ 1643.811196][T16520] binder: 16511:16520 transaction failed 29189/-22, size 0--549755813892 line 2994
[ 1643.821865][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x68000000, 0x0, 0x0})

02:42:09 executing program 1:

02:42:09 executing program 5:

02:42:09 executing program 3:
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:09 executing program 2:

02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100))

[ 1643.829008][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1643.835108][T16520] binder: 16511:16520 ioctl c0306201 20000200 returned -14
[ 1643.850231][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1643.857772][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
02:42:09 executing program 5:

02:42:09 executing program 2:

[ 1643.911977][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1643.925215][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1643.926328][T16540] binder: 16533:16540 transaction failed 29201/-22, size 0--549755813892 line 3147
02:42:09 executing program 1:

02:42:09 executing program 3:
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1643.959912][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100))

02:42:09 executing program 2:

[ 1643.992210][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1644.032456][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1644.038879][T16540] binder: 16533:16540 ioctl c0306201 20000200 returned -14
[ 1644.042993][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1644.076944][T16550] binder_alloc: binder_alloc_mmap_handler: 16533 20ff9000-20ffd000 already mapped failed -16
[ 1644.084748][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1644.093084][T16550] binder_alloc: 16533: binder_alloc_buf, no vma
[ 1644.095040][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1644.111345][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1644.111724][T16540] binder: BINDER_SET_CONTEXT_MGR already set
[ 1644.118482][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1644.118839][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1644.128383][T16550] binder: 16533:16550 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1644.135246][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1644.150317][T16550] binder: 16533:16550 ioctl c0306201 20000200 returned -14
[ 1644.151742][T16540] binder: 16533:16540 ioctl 40046207 0 returned -16
02:42:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x6c000000, 0x0, 0x0})

02:42:09 executing program 5:

02:42:09 executing program 1:

02:42:09 executing program 3:
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:09 executing program 0:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100))

02:42:09 executing program 2:

02:42:09 executing program 5:

[ 1644.232778][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1644.255278][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:09 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:09 executing program 2:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

02:42:09 executing program 1:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

[ 1644.288617][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1644.299457][T16566] binder: 16563:16566 transaction failed 29201/-22, size 0--549755813892 line 3147
02:42:09 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_SET_TIME(r1, 0x7005, 0x0)

[ 1644.331150][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1644.341898][T16566] binder: 16563:16566 ioctl c0306201 20000200 returned -14
02:42:09 executing program 5:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1644.365080][   T26] audit: type=1804 audit(1553308929.809:96): pid=16569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir022638134/syzkaller.GehrBl/2809/bus" dev="sda1" ino=17145 res=1
[ 1644.388628][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1644.402492][T16581] binder_alloc: binder_alloc_mmap_handler: 16563 20ff9000-20ffd000 already mapped failed -16
[ 1644.425123][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1644.445549][T16566] binder: BINDER_SET_CONTEXT_MGR already set
[ 1644.465894][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1644.473526][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1644.516312][T16566] binder: 16563:16566 ioctl 40046207 0 returned -16
[ 1644.534062][T16584] binder_alloc: 16563: binder_alloc_buf, no vma
[ 1644.541888][T16584] binder: 16563:16584 transaction failed 29189/-3, size 0--549755813892 line 3147
[ 1644.555079][T16584] binder: 16563:16584 ioctl c0306201 20000200 returned -14
02:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x60000000, 0x0, 0x0})

02:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x74000000, 0x0, 0x0})

02:42:10 executing program 5:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1644.579532][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1644.607274][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
02:42:10 executing program 1:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:10 executing program 5:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x60000000, 0x0, 0x0})

[ 1644.636524][T16596] binder: 16595:16596 transaction failed 29201/-22, size 0--549755813892 line 3147
[ 1644.667917][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1644.669345][T16596] binder: 16595:16596 ioctl c0306201 20000200 returned -14
02:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1644.705393][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1644.766333][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1644.781588][T16596] binder: BINDER_SET_CONTEXT_MGR already set
[ 1644.811903][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1644.812834][T16596] binder: 16595:16596 ioctl 40046207 0 returned -16
[ 1644.839787][T16610] binder_alloc: 16595: binder_alloc_buf, no vma
[ 1644.846923][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1644.853204][T16610] binder: 16595:16610 ioctl c0306201 20000200 returned -14
[ 1644.873707][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1644.897781][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1644.905008][   T26] audit: type=1804 audit(1553308930.339:97): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir022638134/syzkaller.GehrBl/2809/bus" dev="sda1" ino=17145 res=1
[ 1644.905787][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:10 executing program 5:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x7a000000, 0x0, 0x0})

02:42:10 executing program 1:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:10 executing program 2:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

02:42:10 executing program 0:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x60000000, 0x0, 0x0})

02:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1645.024864][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1645.051300][T16627] binder: 16618:16627 ioctl c0306201 20000200 returned -14
[ 1645.059861][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:10 executing program 0:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1645.074115][T16627] binder: BINDER_SET_CONTEXT_MGR already set
[ 1645.092029][T16627] binder: 16618:16627 ioctl 40046207 0 returned -16
[ 1645.105128][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:10 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1645.119515][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1645.130340][   T26] audit: type=1804 audit(1553308930.569:98): pid=16629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir022638134/syzkaller.GehrBl/2810/bus" dev="sda1" ino=17181 res=1
02:42:10 executing program 1:
r0 = socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:10 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x80ffffff, 0x0, 0x0})

[ 1645.175458][T16630] binder: 16618:16630 ioctl c0306201 20000200 returned -14
[ 1645.191921][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1645.214377][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1645.264960][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1645.296127][T16646] binder: 16642:16646 ioctl c0306201 20000200 returned -14
[ 1645.299370][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1645.328226][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1645.341136][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
[ 1645.358109][T16647] binder: 16642:16647 ioctl c0306201 20000200 returned -14
[ 1645.361387][T16646] binder: BINDER_SET_CONTEXT_MGR already set
[ 1645.372963][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1645.388395][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1645.411222][T16646] binder: 16642:16646 ioctl 40046207 0 returned -16
[ 1645.454602][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1645.470562][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:11 executing program 2:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

02:42:11 executing program 1:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:11 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0xfdfdffff, 0x0, 0x0})

02:42:11 executing program 0:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:11 executing program 1:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

[ 1645.692691][T16659] binder: 16652:16659 ioctl c0306201 20000200 returned -14
[ 1645.700402][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1645.707541][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1645.733127][T16659] binder: BINDER_SET_CONTEXT_MGR already set
[ 1645.747840][T16664] binder: 16652:16664 ioctl c0306201 20000200 returned -14
[ 1645.768158][T16659] binder: 16652:16659 ioctl 40046207 0 returned -16
02:42:11 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:11 executing program 1:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0xfffffdfd, 0x0, 0x0})

[ 1645.803560][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1645.820659][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:11 executing program 5:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1645.856580][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1645.867692][T16678] binder: 16674:16678 ioctl c0306201 20000200 returned -14
[ 1645.885053][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1645.901112][T16678] binder: BINDER_SET_CONTEXT_MGR already set
02:42:11 executing program 2:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:11 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:11 executing program 5:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1645.912911][T16681] binder: 16674:16681 ioctl c0306201 20000200 returned -14
[ 1645.921844][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1645.926207][T16678] binder: 16674:16678 ioctl 40046207 0 returned -16
[ 1645.939938][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080), 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1645.982449][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1646.000841][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1646.038936][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1646.040312][   T26] audit: type=1804 audit(1553308931.479:99): pid=16686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir022638134/syzkaller.GehrBl/2812/bus" dev="sda1" ino=17194 res=1
[ 1646.061690][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
02:42:11 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:11 executing program 0:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
memfd_create(0x0, 0x2)
r0 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\x94a\xac', 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x87bb09c6)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lseek(r0, 0x0, 0x0)

02:42:11 executing program 5:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080), 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x100000000000000, 0x0, 0x0})

[ 1646.108296][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1646.139503][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
02:42:11 executing program 5:
socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:11 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080), 0x1b)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1646.182802][T16701] binder: 16699:16701 ioctl c0306201 20000200 returned -14
[ 1646.189711][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1646.207475][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1646.233194][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1646.245878][T16707] binder_alloc_mmap_handler: 5 callbacks suppressed
[ 1646.245893][T16707] binder_alloc: binder_alloc_mmap_handler: 16699 20ff9000-20ffd000 already mapped failed -16
[ 1646.275881][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1646.298960][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1646.314634][T16707] binder: 16699:16707 ioctl c0306201 20000200 returned -14
[ 1646.324705][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1646.343923][T16711] binder: BINDER_SET_CONTEXT_MGR already set
[ 1646.351618][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1646.366611][T16711] binder: 16699:16711 ioctl 40046207 0 returned -16
[ 1646.374455][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1646.394431][ T9146] binder_release_work: 21 callbacks suppressed
[ 1646.394436][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1646.407906][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1646.428123][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1646.454788][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1646.469342][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1646.491694][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1646.512164][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'
02:42:12 executing program 2:
dup(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x4000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r1=>0x0)
r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1, 0x11, r2, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0xfffffc1d}])

02:42:12 executing program 1:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

02:42:12 executing program 5:
socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:12 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4a, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000000000000000e6ff0000000000000000000000003d0c6f4b000000003d000000000000000000fcffffff7fffffffb536f5510659836698d2f61de7ddf8c6638ce4007428"], 0x200000000000000, 0x0, 0x0})

02:42:12 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

[ 1646.691089][T16725] binder: 16723:16725 ioctl c0306201 20000200 returned -14
[ 1646.699303][    C1] protocol 88fb is buggy, dev hsr_slave_0
[ 1646.705093][    C1] protocol 88fb is buggy, dev hsr_slave_1
[ 1646.706330][T16732] binder_alloc: binder_alloc_mmap_handler: 16723 20ff9000-20ffd000 already mapped failed -16
[ 1646.711278][ T3877] kobject: 'loop2' (00000000057d81ef): kobject_uevent_env
[ 1646.721234][T16725] binder: BINDER_SET_CONTEXT_MGR already set
02:42:12 executing program 5:
socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff004}, {0x80000006}]}, 0x10)

02:42:12 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:12 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1646.741936][ T3877] kobject: 'loop2' (00000000057d81ef): fill_kobj_path: path = '/devices/virtual/block/loop2'
[ 1646.746082][T16732] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1646.746088][T16732] binder_alloc: 16723: binder_alloc_buf, no vma
[ 1646.780433][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
02:42:12 executing program 1:
socket$packet(0x11, 0x10000000000002, 0x300)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff000}, {0x80000006}]}, 0x10)

[ 1646.787592][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1646.802725][   T26] audit: type=1804 audit(1553308932.249:100): pid=16733 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir022638134/syzkaller.GehrBl/2813/bus" dev="sda1" ino=17194 res=1
[ 1646.834638][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
02:42:12 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b)
listen(0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

02:42:12 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

[ 1646.867763][ T9146] binder: undelivered TRANSACTION_ERROR: 29201
[ 1646.874335][T16725] binder: 16723:16725 ioctl 40046207 0 returned -16
[ 1646.878304][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1646.899656][T16732] binder: 16723:16732 ioctl c0306201 20000200 returned -14
[ 1646.947239][ T3877] kobject: 'loop3' (00000000b70b4dc3): kobject_uevent_env
[ 1646.959068][ T9146] binder: undelivered TRANSACTION_ERROR: 29189
[ 1646.989819][ T3877] kobject: 'loop3' (00000000b70b4dc3): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1647.005792][ T3877] kobject: 'loop5' (0000000054166eee): kobject_uevent_env
[ 1647.013133][ T3877] kobject: 'loop5' (0000000054166eee): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1647.024798][ T3877] kobject: 'loop4' (000000000a6400ab): kobject_uevent_env
[ 1647.032226][ T3877] kobject: 'loop4' (000000000a6400ab): fill_kobj_path: path = '/devices/virtual/block/loop4'