0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1685.061863] binder: undelivered TRANSACTION_ERROR: 29201
08:38:52 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, 0x0, 0x0)

08:38:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:38:52 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = dup(r1)
read(r0, &(0x7f0000000300)=""/4096, 0x1000)
r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x40400)
accept4(r2, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000240)=0x80, 0x80800)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f0000001300)={0x0, "59d05b0670bfa5de3718d2a482593e266c484318d1487caf1076d5b915d69d32", 0x2, 0x120, 0x2, 0xe4c6, 0x10, 0x1, 0x51, 0x1})
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={<r5=>0x0}, &(0x7f0000000140)=0xc)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000180))
getsockname$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10)

[ 1685.236276] binder: undelivered TRANSACTION_ERROR: 29201
08:38:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x7a00000000000000]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1685.409123] binder: 14951:14952 ioctl c018620b 0 returned -14
[ 1685.418446] binder: undelivered TRANSACTION_ERROR: 29201
08:38:52 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xfff, 0x2)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180))

08:38:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x5, 0x0, 0x7d74, 0x0, 0x101, 0x80, 0x7, 0x6, 0x4, 0x2, 0x40, 0x10000, 0x5, 0x8, 0xffffffffffbfff80, 0x4, 0x3f, 0x3, 0x1, 0x8001, 0x3, 0x6, 0x1, 0x2, 0x1, 0x7fffffff, 0x6, 0x3, 0x9, 0x2, 0x3, 0x401, 0x9, 0x4, 0x7, 0x0, 0x9, 0x2, @perf_config_ext={0xfff}, 0x801, 0x6, 0x437, 0x3, 0x8, 0x6, 0xf008}, 0xffffffffffffffff, 0x9, r0, 0x3)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1685.488896] binder_alloc_new_buf_locked: 10 callbacks suppressed
[ 1685.488906] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:38:52 executing program 5:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})

[ 1685.550963] binder_alloc_new_buf_locked: 10 callbacks suppressed
[ 1685.550976] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1685.608272] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1685.616116] binder_transaction: 10 callbacks suppressed
[ 1685.616133] binder: 14951:14952 transaction failed 29201/-28, size 24-8 line 3147
[ 1685.639246] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1685.651127] binder: 14996:15005 transaction failed 29201/-28, size 0-8 line 3147
08:38:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x100, 0x0)
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x1b8)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000180)="0fc72f2e660f381c4e212e0f38055e0b670f01c80f20d86635200000000f22d8650f01df2e0f06baf80c66b88e325f8566efbafc0cb000eeba2100b80a00efb800008ee0", 0x44}], 0x1, 0x22, &(0x7f0000000240)=[@flags={0x3, 0x4000}, @dstype3={0x7, 0x2}], 0x2)
r3 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)
setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000040)={@sco={0x1f, {0x6, 0x6, 0x0, 0x9, 0x4}}, {&(0x7f0000000300)=""/4096, 0x1000}, &(0x7f0000000000), 0x20}, 0xa0)

08:38:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1685.827425] binder: undelivered TRANSACTION_ERROR: 29201
08:38:53 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x88, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x8000, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f00000000c0)={0x1, 0x0, 0x100, 0x0, {0x3, 0x9, 0x4441, 0x2}})
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x800, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000140)={0x4cc8, 0x5, 0x1})
clone(0xa0000000, 0x0, 0x0, 0x0, 0x0)

08:38:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0xfdfdffff00000000]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1685.926451] net_ratelimit: 25 callbacks suppressed
[ 1685.926459] protocol 88fb is buggy, dev hsr_slave_0
[ 1685.926482] protocol 88fb is buggy, dev hsr_slave_1
[ 1685.931473] protocol 88fb is buggy, dev hsr_slave_1
[ 1685.931547] protocol 88fb is buggy, dev hsr_slave_0
[ 1685.951800] protocol 88fb is buggy, dev hsr_slave_1
[ 1685.956964] protocol 88fb is buggy, dev hsr_slave_0
[ 1685.962038] protocol 88fb is buggy, dev hsr_slave_1
[ 1685.964568] binder: 15179:15180 ioctl c018620b 0 returned -14
[ 1686.028634] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1686.105844] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1686.114766] binder: 15179:15182 transaction failed 29201/-28, size 24-8 line 3147
[ 1686.153159] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1686.203317] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1686.271358] binder: 15202:15204 transaction failed 29201/-28, size 0-8 line 3147
[ 1686.327010] protocol 88fb is buggy, dev hsr_slave_0
[ 1686.332765] protocol 88fb is buggy, dev hsr_slave_1
[ 1686.338696] protocol 88fb is buggy, dev hsr_slave_0
08:38:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0xffffffff00000000]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:53 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x112, r1, 0x0)

[ 1686.669119] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1686.677418] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1686.686566] binder: 15306:15369 transaction failed 29201/-28, size 0-8 line 3147
08:38:54 executing program 5 (fault-call:4 fault-nth:0):
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:38:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x1fc, 0x0)
ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000200)={0x2, @win={{0x2, 0x7b, 0x5, 0xd7c}, 0x6, 0xf42, &(0x7f0000000040)={{0xe7f, 0x4, 0x2, 0x7}}, 0x800, &(0x7f00000000c0)="d8f2930f510eb4feaad35d85ce20f6c51b11e03748a87927e360b030761f478d200919b69150751174981e8385a8ca9956a0c9711137920f05fb3b7bf50ca750710a2a53dd27da488bdaf715034704d449bbcd30d568e295e4294130c1fab7f35dbfa33efaf9a46a4445f931993c98e0c78b0a39f1a7ace8f1659a50df513814fa789fdfe7fa8e023376e49e3d16df2e74fc2adeee1e2cbfe34f", 0x7}})

08:38:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x2, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = semget$private(0x0, 0x6, 0x284)
semctl$IPC_RMID(r1, 0x0, 0x0)

08:38:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1686.962537] binder: 15427:15484 ioctl c018620b 0 returned -14
[ 1687.049903] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1687.174021] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1687.412198] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1687.423587] binder: 15461:15522 transaction failed 29201/-28, size 0-8 line 3147
[ 1687.444861] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1687.449361] binder: 15461:15522 ioctl c0306201 20000440 returned -14
08:38:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x3, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:54 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x2, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000008, 0x80030, r0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000040)={0x0, {0x4, 0x935}})
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x2, 0x0)

08:38:54 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1687.487502] binder: 15427:15484 transaction failed 29201/-28, size 24-8 line 3147
08:38:54 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x4534, 0x4e23, 0x2, 'sh\x00', 0x2, 0x400, 0x6}, {@empty, 0x4e20, 0x0, 0x80000001, 0x26e500ab, 0x1}}, 0x44)

08:38:54 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x20)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x80, 0xfffffffffffffffc, 0x9, 0x120000000000, 0x9}, 0x14)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x6, 0x2, 0x4, 0x1000000, {0x77359400}, {0x4, 0x9, 0x5, 0x20, 0x45, 0x7, "067e9909"}, 0x80, 0x4, @offset=0x3ff, 0x4})

08:38:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1687.586333] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1687.633400] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1687.806135] binder: 15725:15732 transaction failed 29201/-28, size 0-8 line 3147
[ 1687.844603] binder: 15821:15852 ioctl c018620b 0 returned -14
08:38:55 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x40, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1687.893449] binder: 15725:15732 ioctl c0306201 20000440 returned -14
[ 1687.920597] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:38:55 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1687.995613] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:38:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1688.102601] binder: 15821:15852 transaction failed 29201/-28, size 24-8 line 3147
08:38:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1688.210180] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:38:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

08:38:55 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threade\xf7*', 0xff4c)

[ 1688.294495] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1688.305364] binder: 16027:16053 ioctl c018620b 0 returned -14
[ 1688.312126] binder: 16009:16023 transaction failed 29201/-28, size 0-8 line 3147
[ 1688.341794] binder: 16009:16023 ioctl c0306201 20000440 returned -14
08:38:55 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xf59, 0x4, 0x3, 0x61}]})

08:38:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x5, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1688.582754] binder: 16065:16071 ioctl c0306201 20000440 returned -14
08:38:55 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200, 0x0)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0xfffffffffffff256, 0xd, [], 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/13}, &(0x7f0000000280)=0x78)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe441, 0x100)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:38:55 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x02', 0xff4c)

08:38:56 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0)
ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040))

[ 1688.715760] binder: 16225:16268 ioctl c0306201 20000440 returned -14
08:38:56 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000000c0)={0x800, 0x7ffe, 0x9, 'queu\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\xecG9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O\x90\x06\x10\xae\x85O\xce\x00', 0x6})

08:38:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1688.809998] binder_release_work: 10 callbacks suppressed
[ 1688.810006] binder: undelivered TRANSACTION_ERROR: 29201
08:38:56 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x1})
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180), 0x1, 0x3)

[ 1689.075427] binder: 16340:16395 ioctl c0306201 20000440 returned -14
08:38:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:38:56 executing program 1:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x400, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r1)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)
getsockname(r2, &(0x7f0000000000)=@in={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80)

08:38:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x8, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1689.338897] binder: undelivered TRANSACTION_ERROR: 29201
[ 1689.357587] binder: undelivered TRANSACTION_ERROR: 29201
08:38:56 executing program 0:
r0 = syz_open_dev$vcsa(0xffffffffffffffff, 0x7, 0x101000)
setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000000)=0x865f, 0x4)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x10010, r2, 0x4a)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1)
clone(0x400, 0x0, 0x0, 0x0, 0x0)

08:38:56 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x10', 0xff4c)

[ 1689.539601] binder: 16517:16527 ioctl c018620b 0 returned -14
08:38:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1689.708810] binder: 16571:16630 ioctl c0306201 20000440 returned -14
[ 1689.744298] binder: undelivered TRANSACTION_ERROR: 29201
08:38:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xa, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2000)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x400000, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080))
dup(r0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x12201, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x40000, 0x0)
fsetxattr$security_smack_entry(r2, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000180)='ppp1wlan0[+vmnet1mime_type\'\x00', 0x1c, 0x2)
write$cgroup_type(r3, &(0x7f00000002c0)='threaded\x00', 0xfffffffffffffe25)

08:38:57 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x400, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1689.903450] binder: undelivered TRANSACTION_ERROR: 29201
[ 1689.997002] binder: 16717:16719 ioctl c018620b 0 returned -14
[ 1690.110024] binder: 16748:16789 ioctl c0306201 20000440 returned -14
08:38:57 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x8000, 0x0)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={<r3=>0x0, 0x1ff}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000200)=0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r3, 0x5}, 0x8a)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=""/14, 0xe, <r4=>0xffffffffffffffff}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r2, 0x10, &(0x7f0000000380)={&(0x7f0000000240)=""/77, 0x4d, r4}}, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x12)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=<r5=>0x0)
ptrace$setregset(0x4205, r5, 0x206, &(0x7f00000004c0)={&(0x7f0000000440)="204730d8a8e15c21f540068269fab7f7f558a68772c6951ad09e488dadb189394783b894999669022e4a3ddbc9e6d99703c53282e04017cbd386502779afa9c6c459d45ba55bb29e73eadd129e33a4a67f1634bcc1aaf759a77e85e9fd8c4d3c80828313110415deec", 0x69})

08:38:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x12, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:57 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control\x00', 0x240002, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1690.286030] binder: undelivered TRANSACTION_ERROR: 29201
08:38:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x2, 0x0, 0xa41a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$TCSETSF(r1, 0x5404, &(0x7f00000002c0)={0x9, 0x401, 0x1, 0xf7, 0xc, 0x0, 0x7, 0x7, 0x800, 0x8, 0x51b, 0x8})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
ioctl$int_out(r0, 0x2, &(0x7f0000000040))
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x200, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={<r4=>0x0, 0x9}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000200)={r4, 0x10001}, &(0x7f0000000240)=0x8)

[ 1690.370802] binder: 16937:16939 ioctl c0306201 20000440 returned -14
08:38:57 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:38:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x48, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1690.462681] binder: undelivered TRANSACTION_ERROR: 29201
08:38:58 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:38:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1690.967397] binder_alloc_new_buf_locked: 9 callbacks suppressed
[ 1690.967407] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1691.005574] binder: undelivered TRANSACTION_ERROR: 29201
08:38:58 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x1)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000100)={0x3, 0x2, {0x57, 0x1f, 0x9, {0x8, 0xd4}, {0x401, 0x100000001}, @period={0x5d, 0x7, 0x8, 0x3f, 0x5, {0x0, 0x4, 0x8001, 0x7}, 0x4, &(0x7f0000000040)=[0x0, 0x10001, 0x5, 0x98d4]}}, {0x57, 0x7fffffff, 0x0, {0xb7, 0x1e}, {0x3ff, 0x3}, @period={0x59, 0xffffffffffffff00, 0x7, 0x4, 0x40, {0xfffffffffffffeff, 0x6, 0x7da24a55, 0x5}, 0x5, &(0x7f00000000c0)=[0x4, 0x3ff, 0x0, 0x1, 0xfffffffffffffff8]}}})

[ 1691.116927] binder_alloc_new_buf_locked: 9 callbacks suppressed
[ 1691.116942] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1691.178097] binder: 17215:17241 ioctl c018620b 0 returned -14
[ 1691.237263] binder_transaction: 9 callbacks suppressed
[ 1691.237280] binder: 17115:17148 transaction failed 29201/-28, size 0-8 line 3147
[ 1691.259703] binder_alloc: 32531: binder_alloc_buf size 56 failed, no address space
[ 1691.268916] binder: 17115:17148 ioctl c0306201 20000440 returned -14
08:38:58 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:38:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4c, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xffea)

[ 1691.286530] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1691.311099] binder: undelivered TRANSACTION_ERROR: 29201
[ 1691.317411] binder: 17215:17265 transaction failed 29201/-28, size 47-8 line 3147
[ 1691.388980] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1691.429837] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:38:58 executing program 1:
r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0)
recvfrom$llc(r0, &(0x7f0000000080)=""/119, 0x77, 0x2000, &(0x7f0000000100)={0x1a, 0x325, 0xed2, 0x80, 0xffe, 0x4c, @random="e39101c4c5be"}, 0x10)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)
ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000000))

[ 1691.480380] binder: 17361:17419 transaction failed 29201/-28, size 0-8 line 3147
08:38:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r3=>0x0}, &(0x7f0000000140)=0xc)
getresuid(&(0x7f00000002c0), &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340))
ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000a40)=0x3)
r5 = getgid()
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000380)=<r6=>0x0)
getresuid(&(0x7f00000003c0), &(0x7f0000000400)=<r7=>0x0, &(0x7f0000000440))
lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000540)=<r9=>0x0)
getresuid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r10=>0x0)
r11 = getgid()
r12 = gettid()
stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
r14 = getegid()
r15 = fcntl$getown(r1, 0x9)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@ipv4={[], [], @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000800)=0xe8)
stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000200)="cb63f7ec7031b458c2a380abd013c979bffe7cc7096c06e60fc706130ffa99efb5f97d1c325d3b5dacefc82fa5d06598bd27cdb98297681fb2d11138f50c19dfdf05462c5acd51ca83b81b0c699b10a993c546bfd940393889523efb88c96631c11c04d443ef23861ed9963fc26c4506e2806f8c6f8d43eb12aa3dc705ac51d275e5ceababffe0c0", 0x88}], 0x1, &(0x7f0000000900)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r1, r2, r1, r1, r2]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r1]}], 0xe8, 0x200408d0}, 0x40040c0)

[ 1691.990072] binder: 17361:17419 ioctl c0306201 20000440 returned -14
08:38:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1692.032378] binder: undelivered TRANSACTION_ERROR: 29201
08:38:59 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
io_setup(0x0, &(0x7f0000000040)=<r1=>0x0)
io_getevents(r1, 0x1000, 0x4, &(0x7f0000000180)=[{}, {}, {}, {}], &(0x7f0000000080)={0x77359400})

08:38:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x60, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:59 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1692.166439] net_ratelimit: 25 callbacks suppressed
[ 1692.166448] protocol 88fb is buggy, dev hsr_slave_0
[ 1692.166453] protocol 88fb is buggy, dev hsr_slave_0
[ 1692.166496] protocol 88fb is buggy, dev hsr_slave_1
[ 1692.171529] protocol 88fb is buggy, dev hsr_slave_1
[ 1692.171611] protocol 88fb is buggy, dev hsr_slave_0
[ 1692.196740] protocol 88fb is buggy, dev hsr_slave_1
[ 1692.201849] protocol 88fb is buggy, dev hsr_slave_0
[ 1692.206953] protocol 88fb is buggy, dev hsr_slave_1
[ 1692.257127] binder: 17506:17533 ioctl c018620b 0 returned -14
[ 1692.309708] binder_alloc: 32531: binder_alloc_buf size 96 failed, no address space
[ 1692.336700] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1692.372010] binder: 17506:17612 transaction failed 29201/-28, size 85-8 line 3147
[ 1692.410336] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1692.425775] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1692.469073] binder: 17580:17619 transaction failed 29201/-28, size 0-8 line 3147
[ 1692.476733] binder: 17580:17619 ioctl c0306201 20000440 returned -14
[ 1692.576484] protocol 88fb is buggy, dev hsr_slave_0
[ 1692.581688] protocol 88fb is buggy, dev hsr_slave_1
08:38:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x68, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:38:59 executing program 0:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0)
setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@dev}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8)
ioctl$TUNSETOWNER(r0, 0x400454cc, r2)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
clone(0x3, 0x0, 0x0, 0x0, 0x0)

08:38:59 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x4}, 0x1)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1, 0x0)

[ 1692.811857] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1692.878255] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1693.012522] binder: 17705:17707 transaction failed 29201/-28, size 0-8 line 3147
[ 1693.054788] binder: 17705:17707 ioctl c0306201 20000440 returned -14
08:39:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:00 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6c, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:00 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)

[ 1693.298313] binder: 17866:17908 ioctl c018620b 0 returned -14
[ 1693.346789] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1693.354612] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1693.371161] binder: 17924:17957 transaction failed 29201/-28, size 0-8 line 3147
[ 1693.381579] binder_alloc: 32531: binder_alloc_buf size 96 failed, no address space
08:39:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xc040, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='ip6_vti0\x00')
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:00 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000100)={0x1, 0xffffffffffffff9c})
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0xff, 0x4)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)

[ 1693.389823] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1693.400516] binder: 17924:17957 ioctl c0306201 20000440 returned -14
[ 1693.403104] binder: 17866:18027 transaction failed 29201/-28, size 86-8 line 3147
08:39:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x74, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:00 executing program 1:
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffffffffffffffff, 0x100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={<r1=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8001, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x12}}, 0xffffffffffffff81}, @in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}]}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x100}, 0x8)
r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80)
chmod(&(0x7f0000000300)='./file0\x00', 0x6fd8e8468880b9ef)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/loop-control\x00', 0x1000200, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000002c0)="f30f015900e900000f5cdfb802068ec00f011bd9fa66b9800000c00f326635000400000f30f3a5f4f00fc06d00", 0x2d}], 0x1, 0x28, &(0x7f00000003c0), 0x0)
r4 = dup(r3)
ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000240)={0x16, 0x1, 0x4})
r5 = geteuid()
sendmsg$nl_netfilter(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x234, 0xc, 0x7, 0x120, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x5}, [@nested={0x38, 0x59, [@generic="88513e240cbe62a7844f67da3cf810a2167fb105e186b114fcacf39d684d304ad7382c8ea7ce15b1acaf9b1ebd63beb242171648"]}, @typed={0x8, 0x55, @uid=r5}, @generic="4b5fe2a0fa184038dd0020a13c6fc00ce667fe01d43bd574ee3bf66a8aaed396e0ae9add4fa0a7d92cdbb6542436ca0b7bd17b8d869cef14d7ef6dba6853fe969b6d6ef83ede20bfc44695669914f5cf62d02af60fe3d5f2a746a0969cd5e1b3cc00c6fd858d889b7293", @generic="f2ee9893a24027e69a391cf55d95eddce79b74a77f063f86634ee6d7ce6001f68cb2b57f08bec7873cd13375e1ee7aaf41364591c5cdd4109801601af1f106b97732128ff1c767a2e237d99f8389a98b97c151c4a6d482fa5f3abe2e390823c5612f1f34c19710947155994987be4de02df6ec3759e44d23e0e4c1", @typed={0xc, 0x2, @u64=0x3}, @typed={0xe8, 0x8c, @binary="da2b5849da2a92ceb2271cb0fa1aa5935f36461ea7909b12e7fa0a31b0a46308555122967b29cbef2e8a5d8bb12d322c995b12a8ac06c2d25672ba3d5220851668b91af67b187f71ef2bffd34739631152d4898244011b8df7ef6330f15e6afed730d1092c0680d08aa3743a7151b289d9f0c1e965b653a580d2dfc13abf64841b8dafbd3130bfd1ca81485a04364af81a3f674d5a2c12e2335e90e2005230a80a0e1a04e98f15fd181d1420a49971f21973e5b631907557c8561b53de9673dec2f5d04a3f8c4b73e2f67c441580e9c3ec356149b035a3262b84e632116cd56963"}, @typed={0x4, 0x8a}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0x10)
getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c80, 0xfffffffffffffffe)
syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x2, 0x400000)

08:39:01 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:01 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2)

[ 1693.799823] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1693.867827] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1693.977614] binder: 18135:18137 transaction failed 29201/-28, size 0-8 line 3147
[ 1693.985222] binder: 18135:18137 ioctl c0306201 20000440 returned -14
08:39:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7a, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1694.073402] binder_release_work: 5 callbacks suppressed
[ 1694.073411] binder: undelivered TRANSACTION_ERROR: 29201
08:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1694.320021] binder: undelivered TRANSACTION_ERROR: 29201
08:39:01 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000180)={0x5, &(0x7f0000000080)=[{0xfff}, {0xfff, 0x3}, {0x7fff, 0x3ff}, {0xb7c, 0x5}, {0x7f, 0x401}]})
write$cgroup_type(r1, &(0x7f00000001c0)='threaded\x00', 0x3db)

[ 1694.384225] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1694.462484] binder: 18288:18351 ioctl c018620b 0 returned -14
[ 1694.476206] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:01 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:39:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x53, r0, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000ae4000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00002a9000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000602000/0x3000)=nil, &(0x7f0000991000/0x4000)=nil, 0x3000})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x2, 0x0)
unlinkat(r3, &(0x7f0000000040)='./file0\x00', 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1694.557128] binder: 18288:18351 transaction failed 29201/-28, size 98-8 line 3147
[ 1694.567660] binder: 18186:18268 ioctl c0306201 20000440 returned -14
08:39:01 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x300, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1694.643136] binder: undelivered TRANSACTION_ERROR: 29201
[ 1694.651080] binder: undelivered TRANSACTION_ERROR: 29201
[ 1694.671404] audit: type=1400 audit(1552120741.957:118): avc:  denied  { map } for  pid=18367 comm="syz-executor.0" path="socket:[269081]" dev="sockfs" ino=269081 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
08:39:02 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast2}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x8000)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000180)=0x4)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x7fffffff, 0x10000, 0x80000000, 0x8, 0x0, 0x1, 0x0, 0x8, 0x10000, 0xdc, 0xf41, 0xfffffffffffffffb, 0x0, 0x8, 0x5, 0x8000, 0x7fff, 0x1, 0xd6e1, 0x10001, 0x2ab, 0x400, 0x81, 0x4, 0x3ff, 0xffffffffffffff80, 0x7ff, 0x4, 0x4, 0x0, 0xffffffff, 0x20, 0xfca2, 0x1, 0xff, 0x5, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x49}, 0x2, 0x985, 0x1, 0x7, 0x6, 0x9, 0x72}, 0x0, 0xa, r0, 0x8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$binfmt_aout(r0, &(0x7f0000000440)={{0x1cc, 0x5, 0x7, 0x251, 0x11e, 0x400, 0x308, 0x6}, "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", [[], []]}, 0x1220)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000001680)=@fragment={0xff, 0x0, 0x100, 0xfffffffffffffff8, 0x0, 0x800, 0x66}, 0x8)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{<r3=>0x0}]})
ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000400)={r3, 0x2})

08:39:02 executing program 1:
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400000, 0x0)
r2 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffff9c, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={r2})
write$binfmt_misc(r0, &(0x7f0000000300)={'syz1', "733f2e49a71ac4eddb91e3c4a00ffcf3ba70c7c501031cbd322ba063dae2c8b71976675f48dae99e3be58451b06a1a5f013c55ce6e5e8ef3a56a1fa71c030b6b14c1604421bcc967af7017585d6bd3120646f767fcea5a39770a1b20eb8fd879989a15406ca8cab79ceb3d0b3bf20ab77cc394209e7a3a1d80def672a54237f9602612a1c2787b47536045d07c27b7ede40cac2f2fab99edffc8eda45f6f78a6fc8029c50567d3ba45b4e681d79ac45c2eed3f9d21394fca91f1ec95862949508447207f96a51db8379bb21a2a9cf1a031e67b60585922dc4128e237ad782b9121b3bc36abba0ddb95f40294bf3f684a5c12faaeaf2fbf8b8a49788bb220bc1e5231ef9f17d6a86e06530fd439ae8a6c8f0c89b608f5fbf1e3c8c83ca9ed33dcd77ca8c8dcfb1991dd29302c566f8f7d6b90d200b0b043f9efac0abd338a9572a9dc67e79c2185aba4a084c53a7b3a5289bc52fb5709b6d49960147b60b2bdf5a9816fc2572b75b8c429384d4c84ebea2244a0d813c21a84f5ef0bc321a3ab25aef8db13928ea539f1c8185983f717c07ba4282d2eba68df7844beafce535888f610122c00ba4f0e2871199f2d385f3a9061377c6a863ab37c7f744a06f227731a601dfe6eecba97249527368ea069b19ddf743261ca03ae9b37ede3c234ab0ba51a75905d707737fde5c1532ac6ec11475243328e7311292e748a7572813439949c9e462192253cd0a0c9624e9f561d67036793c6435a8fa017bfe53e9c0e3c720e756829a200dd4255a86d58a20d867e1d365c1d405dfb04812208f2bf95c8d796b55734a5793aacd48aa97ff3a208330feb1acaa9f8ba87b74222ba35b5ad91b805f9161cf692667c25b48b5ca57765714771c573e8a7e4658c1330143c046189a3e9b3fd61566a7a41bc2d3b02ad6203c64a7121814ba4116f355d8e622c82dce94aeaf821184f909d1b1aa1665ecfed780f175af4c6184391042e06b2f8d5a5a2a424353dd79fb98aaf3c11aaa437ae81bb79a9093b761a08cd79c599c9d8b08036abdd11570ee007690b79228f18514aa43cf65e76ffea8a21c3a26de89270174999622e56de14f6621037de6326d439c07f715cb72dbc364f8c98efdb658782fe38e3fb922a5332ea82303d4022ee6ecdc24c7f4206258c56e583332e3a3b54e1172b1cf3ef0715e1475b0af2dad2446586f331048324603dca3b12f53a23af02f07317fe0d978c7cd144a245b91a6e0dee110ed95b2fb8cea2be387df30e39236cde04c6d01491e383c092a8943389549af6f6500274377446c2aeab89caea636bf7cd25eb28d6aab097e0ece8d4d74053a1ccba78640bfeced7960fe03eb0cf3b8c13b9ef5191dd8919f1d43c767eb6663fb932c6aa7cac52e837589c13c2134a1fe3fb038f748bc59086156e01ddaef114bd8a9ccc8fd5bd6302189f2b7e4a5f8b0587e71989b85a22ddfd4ac9ed82cfd415aad5525ffc5438abf8c344d3a8ac3a09804d55f3c4f0f54a8dbad9bae4c83c9196c91836f41e2d3ce25b977fcc3e39847c28c879b61dd1957a817e6de25429544b687a7c88637c949f8e781866f7ab3001a54d87aedc205879f8a2b676464b02b816cd7ccb19df8114542f8397b0efef502e039c1070af45b69a296b5764cada0947f21d84a318886a3e4a8abef91431a3248d1eb768e9cbe1bb74e4b40d63b154dd2e4a91e0664572a4edceee5c493333379d18965a744ffc8028b076422333f71e7c64c2f2c51e525edf5f31b3c79523ac0867a9e85595995c635d3435cb6a870d72c4d11928bc08f1574bc7a6122c0d1a3ae8aa7623c2d106173a96a553521dcb781eb7be0c1ab2a3ed6d12b80dabb46360029c0dffdce2a744ff4c51b675809b55226c898abf223d3a1066c2da93a077d082416e41bd5433a63cbbc39daf8466b2e93c598aba27eb99c80645828032605edd8dbf42dfbb73c83897d753625dbddb9c1347ccfcbe017ba0ee5a42dd2d0c48b7fffb5620a302c3fd46e42f31f675bb5a8194a3de80f1ee0b838280beca105cd465dfad0a623c83af11b12a18b4c885cae8f37ade05056b77d5282562bfeb69aa1bd682acfe8d12fbbcff6a238f62f06cbb5593f1430aba4b1d5547ea040caf60e782856eb386e733f928aa189898e47dae6c96011e6446c6c92b02f156afe41d7569fa14a4ddc9989e6973cda4712638b7820d33a310b7e77622b80c426e5c56a7d1b0e0572821a3d4517140725fdf0c5584455779f669584a6b34b2780f0fe0e8fd10a02d231be9017a7f64306d07a640a5715a5c7fb2f19c47c824979def6a445f368805f1d81c97db5a2c5685bf5a31c56b3ba3ff4670e5d1e0d4afb2b19f8d089159b797bc60692bebd9a746423cd62d37387c3b828f3b7f69ab5abeef717753291e60ff5fd15facd7cb26458de538e1744c99da54eaa6bde22bbd014f34a7094cf4d7a7bbe1bd212add788d6835c3fb5796002e10aaabacefbb5292fe00dd6a9b4a8b6c7511b0e72f5031f7293403ff0aefadfd11a52d0d594d3d26b79be5973878bd9249fbd42ddd57ce84f975fddcae6db992abb8f5e89ca605428abc932bd109b3cbc12d299956b02bbfd21f496df0033e378753579ce795ed7ac789f4aa19dfb3dd549d8d15d6bbbfebd4e1fa10ba1892856fe39014a68d7f6a55b11d6368436074ba4897ef99e6ef10bba729507ae92bf25eebd4a5860f90b6875b6830a14ee2e8ff92c19b46616f05d51e2918c7b497f1a8222244bf8c5077c884ab18ea8c6b22783d52d92fed110ca82bcb010e5109f9c76616e22c0a2b85221aa57ac12fc06113ebc2f9203fe9989e627b73060af55348aa3bfffe58e9c0456730191bfb99c42b578fdadee5310dec809580491b3c7a77f89430a6f9608ecb8f13b10a6c2b31ad225757260e16c2f1a08f5f763d7d29091e23f98f9d42382f154c7f89adfacc8d68b7600c2b09f5af4512261c14146e16de8271845abcda1fbaa1cedba389266b817b02b47f2ed1f775f68bac3843faa41dc990062d6aa3084a4af5255ef55c1d0e4c03e24bfea5a30d332a970b54175c306a4ffcdc544c666379d931d1114d96333c46e5f96f70c2dce0ad881b444c4049fef64dbf707fe5bd1b39b8f5d8b2dbaa9da2a8eff9571e082a1c72470b1e1314841afdc78b0177ec8a028a1342e2155f41710f838febdf54df10b5642f06d2f9bda2ced0f29b382c6b0dccbda2b2b3b2d527d8a69e2cfc1c94675197371c5367d6f88538a4207f64d4bf9fa91b9b4cd7a56cfccd3eed73037088fea347801b53df3983e31065f698aadb544ee5390ac7404ed7072bab6df210a4168adb0b763814a71b5ebe07f68cb0ae71a8818a7fc7c6b1c1b552e60e23baabbd88a19acc988fd550f1a6e66ddd0d2e036aca8cf6784aa7e7d5b264190627f962def1a01412f7e9aae78e8862363805344ad6154585cac1ff279b276bafd069dc700999a0eed024dcd27336f9b787f98c3cf898eace5ed5b10daa4561dfced6524b7b47956bbe442f275a4f093b6c9260d2bcc666ab041e00ecd746a8a03d05ebb506a1cdea04c8819f3917474885815e984c2e99949403043ed5c7b9614533c163af4ad5d6f694b3291e67b1a8347ff3bdbaaf59a54006e697444c4c4a65e210a8a3e20163bad27628526107197e31b8be055b6cdd4dff796c7cafc8710bb0e54aa12ee346c63fa7c1c770129e0c2c9fb04e07620612f28c4d6cab888b0df9caad23f98314f76daa22431d7522d4c418e9b94ebc24f0b6e366b39786fc3c836c8193d4ab1a71d9452a0ee1796586b0a65caa7e09cb720315b4dc3dcd745c551a48b8edf4c7f64e1cbc02bae20c7eab0c6696741b1cf084a40ba46babf0423331cf379cb5b35f65021cb0b390abd4f33547a79855e26fa0902ecdfd5c3c66049db4ea18f7d1fb00fa55383daa217a6ed6fc039cd50a30eac1f10ffcf327f60e9ca3e48d77988ae2c374bdba85d59bfd289a168af472789f84ad803c70dcc4a6c6ffdccec3dec03dcd7198bb39d74cf0f6538bb84142d4c955061432b5e7293496e7c5d75429801ccf6b07b4db337fd86e87fc55e0b96e9fe546edc48ca7065ec4d7cca16e39fe982a316eeb0f5c4baca3e5496fd12880f43ae910b721e5abd2685f6ad5a29c5e739af3ccaa2f30d791d251ba9e9beb6948e170d57bd48a099d3b826821b61d738e62d3bbd3ca7e22cefe9bd238b4bb78b8046ea211dd9cb73c34ad00630dabf140764af11148b81e459efc5c2e14005b463bb481c9bab7a436d126e8bbab4dcb1a881eb62f3395429b4e73ca2f9ec192fb28957da3ed7a8b57dedf96a48ba52e0dbd352709b37b21834a953bce5cd66d3cef6dba1e9a53abed49a4e1acf6b3b7a8c7dffc8a78dd6e257982c64279c8fdc12aa4b8415c77dc37a6fcf458a3460a56688f1d5b7a3a6888cce3165f6be92d845aa433c1162066413c1dd2d12bd74d22c803ad9f6cc127fa1c7e862647af3fe5306f7eba36753f5b5546c74ad38bfbf71c8c4a17d09f1764916dbbd6b2ef9cd7df16a2941c3be1bcdb74809de5622a1009a8e0e819e0b6a94e8989ca27c91000dccf7f445ed778ec7b2295554dac2823da488c1734b260d025eefcbd87fd61d5a72ae1780e853c8ac631d1074886daa0714995fb2e40684b937ca4f1871e50e0ce655c84a390ea5ce30761bef79510aeb72b505fb06b2698bd7554b1c07b2ad31861a0d3f9f5af53538231f182bb3b6f59a0214bca6e47e035f03d378e655447d694dc58c6dfe10cd9649bbd1374c8f81663e26262d6e5b334a999ca63d430cc47788b11827148042bb1708df7f6ccf0f9175fb896b21e8fdb52a8c744a476d2cf493f1d7b3167eef9f84d4a0508ed0c57c82bb891826535afe0ff088da75450fe31be00fffad4ae4c57450f00330c6c43e7cb7ec79b134f44d7c9615753011056f76d6d901f3f7a801a2bf70326623a314aba8ea0a9831bd2c492667ecea0620dea00adfde085c92f90c39e5ae570fbc973d411a9e6160fdc81d06df3b2cfbb1046c46a8538dea3cdfb9d5b0ffaadb3b48a382602c65ee9f7b640157a6f4d151d593c2efb68a75a46bdd8615cb2bca11d0973e98c173b4d4fafb046f1dd027624da69db026fa519061dabe8845a7fdc658cc310ed097a3080a394397fa66ff18e9307cfddee2dc493cb4d246f92e1ee016f823e8ca4f493996680cd636533bb5eb436f90c429f6733bdff9e7afb4c3db1cbd3b8fbea56e170bf3ac61202c917b01009872f6dba0b32a439a24e98febde01b8c393b6782a19162b6b1f92eb8661176a8e29f2edc506d17a9f538a576ca130497da2fb7195bf9074173a7420b92aaaf04f104df05d961990f65f279c5bdef5802d04d15441737eb67768ef6bd4f126c07f14c8aa2f1835c1fb5cf1dc2d864f12fde4a3be12c2d56c6c5251ffa898234ce97fd7ab3da0b8d0c8ec1a293285da97071e15c38cd49427b5f5ebe8763cbff81826ec9a2027e21b6f8cccc7e74bfbad6981c6bba3995ab0e3207d53b4e42c11167a1d8655e38e1628bce8f55271cdef3b73b0386eb39e77c0da09965f950a2427b343bf74716cb5803899fd58c5b7fff00685323d45770f48e04cf4222d18e249a97dcf630450c7d4e3bdbfadf7b92726c5e1420efb5cb6e9d767f6445366b2d0faa846bae5202efaea8c51fb17e702f3f94bdbdb8a315deed99ae7746145322120c96a513544652467b944f635bd56796746915b4ba60a29c0d46cac3eeae5801cb21c3916e7cfa"}, 0x1004)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f0000001340)="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", &(0x7f0000000100)=""/60}, 0x18)
r4 = dup(r3)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c80, 0xfffffffffffffffe)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x2b, 0x4, 0x0, {0x3, 0x266, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b)

[ 1694.779467] binder: 18428:18467 ioctl c0306201 20000440 returned -14
[ 1694.818734] binder: 18469:18473 ioctl c018620b 0 returned -14
08:39:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x500, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1694.942513] binder: undelivered TRANSACTION_ERROR: 29201
[ 1695.346242] binder: 18520:18653 ioctl c0306201 20000440 returned -14
08:39:02 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20002, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [<r2=>0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0x4}, &(0x7f0000000140)=0x8)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

08:39:02 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)

08:39:02 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x600, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1695.509242] binder: undelivered TRANSACTION_ERROR: 29201
[ 1695.724972] binder: 18794:18799 ioctl c0306201 20000440 returned -14
08:39:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3cb, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1695.766048] binder: undelivered TRANSACTION_ERROR: 29201
08:39:03 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x400, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, 0xffffffffffffff87)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f0000000040)='threaded\x00', 0x2)
fchmod(r0, 0x100)

[ 1696.033547] binder: 18861:18902 ioctl c018620b 0 returned -14
08:39:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x700, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1696.078856] binder: undelivered TRANSACTION_ERROR: 29201
08:39:03 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x0, 0x1}, 0x2}}, 0x10)

[ 1696.121302] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1696.121313] binder_alloc: 32531: binder_alloc_buf size 984 failed, no address space
[ 1696.206943] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1696.206956] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1696.246623] binder_transaction: 5 callbacks suppressed
[ 1696.246640] binder: 18861:18902 transaction failed 29201/-28, size 971-8 line 3147
08:39:03 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:03 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
clone(0x40000000, 0x0, 0x0, 0x0, 0x0)

[ 1696.277838] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1696.285511] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f5e0ff, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1696.361425] binder: undelivered TRANSACTION_ERROR: 29201
[ 1696.435607] binder: 18968:19024 transaction failed 29201/-28, size 0-8 line 3147
08:39:03 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
fsetxattr$security_smack_entry(r0, &(0x7f0000000000)='security.SMACK64IPIN\x00', &(0x7f0000000040)='\x00', 0xffffffffffffff48, 0x3606a30a5b2a3214)
r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x141040)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000100)={0x100000001, 0x8003, 0x4e, 0x2, <r2=>0x0}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x4}, 0x8)
r3 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)
fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x4)

[ 1696.505915] binder: 18968:19024 ioctl c0306201 20000440 returned -14
08:39:03 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000180)={0x0, @raw_data="950b820a04df5dc6d1448df667977c174f8dac187d642b625b931858d1637c8fc336725862a02472599623950377b29cf05a52e8bc510d650fc3a70f254b8db1840a2fa4f8c4ecaf9582ff58cb2d78f88bae0efa7840c9f77de39e00ab2b45b0bb87c5b1a0efaaa5cb7c8ee1aa605032a1b2637caf26087dde402c75d8a1223d3c482ab25ad5d68896ad7d9d8b0e28c2cefd09e9483fad903d6587ed07a9999c33c4cf816d56b3c8e016165506dc64e7ab93b2c2a9f979dd0a14156d80f0b3cb77c957fe90fa3a0d"})

[ 1696.628034] IPVS: ftp: loaded support on port[0] = 21
[ 1696.635304] binder: 19238:19241 ioctl c018620b 0 returned -14
[ 1696.700195] binder_alloc: 32531: binder_alloc_buf size 100000008 failed, no address space
08:39:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xa00, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1696.847850] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1696.871251] binder: undelivered TRANSACTION_ERROR: 29201
[ 1696.920400] binder: 19238:19241 transaction failed 29201/-28, size 99999999-8 line 3147
08:39:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:04 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1697.216085] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1697.249354] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1697.258866] binder: 19261:19397 transaction failed 29201/-28, size 0-8 line 3147
[ 1697.277313] binder: 19261:19397 ioctl c0306201 20000440 returned -14
[ 1697.293603] binder: 19391:19487 ioctl c018620b 0 returned -14
[ 1697.318438] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1697.356556] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x1200, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1697.365396] binder: 19391:19407 transaction failed 29201/-28, size 24-2 line 3147
08:39:04 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fa)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

08:39:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe441, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:04 executing program 1:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x711840)
write$apparmor_exec(r0, &(0x7f0000000080)={'exec ', '/proc/self/net/pfkey\x00'}, 0x1a)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r1)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000180)="8354554867914a0eb99a0446c193a5287fdd40caaac43b191c3f61a33f2a3c2033dbb7a021b1c166712fb971c8169d49533c14b7a2f97cf0f6c5c839b0d7f91d990c2c9c9b6c4dd3d9f6300d7e5edae9f563aa73e89fc24b58ce5c0d9083f9eff899797201bb14396b92c3ffc378530d1810f2d7f8e92d02bc1943b309074587e0e7baf0737f4c6c554d18112fa0260df4a32257a7e29583f62f1d09a07642fe9a8aaab4df7ffdada799d622f51be3e83ad94b34fbffcb85556b29bc0c17b6238f9de75fa12efaf442efdf8823", 0xcd)
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1}, {0x0, @dev={[], 0x14}}, 0x8, {0x2, 0x4e20, @broadcast}, 'dummy0\x00'})
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000140))
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

[ 1697.635879] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1697.698883] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1697.797023] binder: 19566:19572 transaction failed 29201/-28, size 0-8 line 3147
08:39:05 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10242, 0x100)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in=@broadcast, 0x4e23, 0x101, 0x4e24, 0x200, 0x2, 0x20, 0x0, 0x0, 0x0, r2}, {0xde92, 0x7f800000, 0x800, 0x5, 0x9, 0x10001, 0x0, 0xb7b7}, {0x400, 0x6, 0x2, 0x1}, 0x2, 0x6e6bb1, 0x1, 0x0, 0x1, 0x3}, {{@in6=@loopback, 0x4d6, 0x33}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x0, 0x2, 0x80000000000, 0x90, 0xfffffffffffffffe, 0x8}}, 0xe8)

08:39:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1697.853408] binder: 19566:19572 ioctl c0306201 20000440 returned -14
08:39:05 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:05 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:39:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x2000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1698.070305] binder: 19714:19738 ioctl c018620b 0 returned -14
[ 1698.148214] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1698.276859] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:05 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x100000424000)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0xff0, 0x100000000000, 0x9, 0x7, 0xfffffffffffff5bc, 0xf908}, 0x9, 0x6, 0x7f})
clone(0x0, 0x0, 0x0, 0x0, 0x0)

08:39:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x4, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1698.340868] binder: 19714:19738 transaction failed 29201/-28, size 24-3 line 3147
[ 1698.399351] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1698.409332] net_ratelimit: 26 callbacks suppressed
[ 1698.409341] protocol 88fb is buggy, dev hsr_slave_0
[ 1698.409392] protocol 88fb is buggy, dev hsr_slave_1
[ 1698.416442] protocol 88fb is buggy, dev hsr_slave_0
[ 1698.429792] protocol 88fb is buggy, dev hsr_slave_1
[ 1698.434886] protocol 88fb is buggy, dev hsr_slave_0
[ 1698.440096] protocol 88fb is buggy, dev hsr_slave_1
[ 1698.445190] protocol 88fb is buggy, dev hsr_slave_0
[ 1698.450262] protocol 88fb is buggy, dev hsr_slave_1
[ 1698.541787] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1698.550701] binder: 19793:19795 transaction failed 29201/-28, size 0-8 line 3147
[ 1698.558302] binder: 19793:19795 ioctl c0306201 20000440 returned -14
08:39:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x3f00, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1698.777515] binder: 19866:20033 ioctl c018620b 0 returned -14
[ 1698.816455] protocol 88fb is buggy, dev hsr_slave_0
[ 1698.821552] protocol 88fb is buggy, dev hsr_slave_1
08:39:06 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1698.932659] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1698.945839] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:06 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0)
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x8, 0xffffffffffff7778, 0x0, 0x0, 0x27ec, 0x7, 0x6})
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1699.004756] binder: 19866:20071 transaction failed 29201/-28, size 24-4 line 3147
[ 1699.005050] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1699.031909] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1699.043488] binder: 20052:20109 transaction failed 29201/-28, size 0-8 line 3147
08:39:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6ba, 0x40000)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xe, {0x6, 0xfab, 0x20, 0x2}})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000080)={0x2a, 0x3, 0x0, {0x5, 0x9, 0x0, 'threaded\x00'}}, 0x2a)
r2 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1699.054623] binder: 20052:20109 ioctl c0306201 20000440 returned -14
08:39:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1699.134312] Unknown ioctl 1075867666
[ 1699.147588] binder_release_work: 6 callbacks suppressed
[ 1699.147596] binder: undelivered TRANSACTION_ERROR: 29201
08:39:06 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x2001000c)

08:39:06 executing program 1:
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1699.241601] binder: 20220:20227 ioctl c0306201 20000440 returned -14
08:39:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x5, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4800, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1699.796309] binder: undelivered TRANSACTION_ERROR: 29201
08:39:07 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x20000, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x0, 0x0, 0x0, 0x0, 0x0)

[ 1699.842998] binder: undelivered TRANSACTION_ERROR: 29201
[ 1699.982362] binder: 20434:20478 ioctl c018620b 0 returned -14
08:39:07 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x8000, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1700.044673] binder: 20427:20513 ioctl c0306201 20000440 returned -14
08:39:07 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x6, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xd9, 0x4)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2)
setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000000180)={0x7ff, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x6, 0x0}}}, {{0x2, 0x4e23, @local}}}, 0x108)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1700.200293] binder: undelivered TRANSACTION_ERROR: 29201
08:39:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4c00, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1700.277575] binder: undelivered TRANSACTION_ERROR: 29201
08:39:07 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x1f, 0x20001)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x400001, 0x0)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r1)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1700.358251] binder: 20581:20604 ioctl c018620b 0 returned -14
08:39:07 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x181, 0x6f0})
signalfd(r0, &(0x7f0000000000)={0x9}, 0x8)
r2 = dup(r0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x100, @mcast2, 0x100}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x1}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e22, @rand_addr=0x71a7a950}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e22, 0xbe, @loopback, 0x4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, [], 0xc}, 0x800}], 0xc0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

08:39:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:07 executing program 0:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threade\xf7*', 0xff4c)

[ 1700.542116] binder: 20754:20756 ioctl c0306201 20000440 returned -14
[ 1700.615936] binder: undelivered TRANSACTION_ERROR: 29201
08:39:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:08 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x5}, 0x0, 0x6e6bb9}, {{@in=@dev, 0x0, 0x3}, 0x0, @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x9}}, 0xe8)
readahead(r0, 0x8, 0x83)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:08 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1701.203208] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1701.203217] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x7, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1701.277033] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1701.277048] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1701.293719] binder: undelivered TRANSACTION_ERROR: 29201
[ 1701.346885] binder_transaction: 5 callbacks suppressed
[ 1701.346902] binder: 20780:20929 transaction failed 29201/-28, size 0-8 line 3147
[ 1701.395577] binder: 21003:21014 ioctl c018620b 0 returned -14
[ 1701.406677] binder: 20780:20929 ioctl c0306201 20000440 returned -14
08:39:08 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x400000)
getresuid(&(0x7f0000000180)=<r1=>0x0, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
sendmsg$nl_crypto(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x88100401}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=@alg={0x130, 0x10, 0xa08, 0x70bd25, 0x25dfdbfc, {{'ecb-twofish-3way\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0x10001}, {0x8, 0x1, 0x7fff}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x7}, {0x8, 0x1, 0x3f}, {0x8, 0x1, 0x296e}, {0x8, 0x1, 0x7ff}]}, 0x130}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)
setfsuid(r3)
r5 = msgget(0x1, 0x4)
getgroups(0x4, &(0x7f00000002c0)=[0xee00, 0x0, <r6=>0xee00, 0xee01])
r7 = getgid()
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000780)=<r8=>0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=<r9=>0x0)
msgctl$IPC_SET(r5, 0x1, &(0x7f0000000480)={{0x82c, r1, r6, r2, r7}, 0x3, 0x7, 0x6, 0x1, 0x2, 0xb48, r8, r9})
r10 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xeebe, 0x400000)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r10, 0x4040ae72, &(0x7f0000000280)={0x10001, 0x4, 0x5, 0x0, 0x3})
ioctl$SG_GET_TIMEOUT(r10, 0x2202, 0x0)
ioctl$UFFDIO_UNREGISTER(r10, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$sock_ifreq(r10, 0x8927, &(0x7f0000000080)={'gre0\x00', @ifru_flags=0x100})

08:39:08 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000540)=@newsa={0xf0, 0x10, 0x801, 0x0, 0x0, {{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1701.516554] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:39:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6800, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1701.639856] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1701.672802] binder: undelivered TRANSACTION_ERROR: 29201
08:39:09 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop-control\x00', 0x80003, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x400)
ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000080))
r2 = dup(r0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="eb821f89c775679a926f02f95355ab73", 0x10)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

[ 1701.746960] binder: 21003:21014 transaction failed 29201/-28, size 24-7 line 3147
[ 1701.867104] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1701.886283] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:09 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}}, 0xe8)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x282000, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f00000001c0)=0xfff)
r2 = dup2(r0, r0)
bind$netrom(r2, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1701.909390] binder: 21089:21093 transaction failed 29201/-28, size 0-8 line 3147
[ 1701.971121] binder: 21089:21093 ioctl c0306201 20000440 returned -14
08:39:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x9, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1702.027096] binder: undelivered TRANSACTION_ERROR: 29201
08:39:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6c00, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:09 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000400))

[ 1702.096880] binder: undelivered TRANSACTION_ERROR: 29201
08:39:09 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x4000, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4c3200000000, 0x400a01)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x9c)
r2 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x3, 0xfeb, 0x1c0, 0x8, r2, 0x6}, 0x2c)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x0, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)

[ 1702.225600] binder: 21291:21292 ioctl c018620b 0 returned -14
[ 1702.266431] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1702.372055] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1702.609007] binder: 21289:21305 transaction failed 29201/-28, size 0-8 line 3147
[ 1702.616977] binder_alloc: 32531: binder_alloc_buf size 40 failed, no address space
[ 1702.631210] binder: 21289:21305 ioctl c0306201 20000440 returned -14
[ 1702.640311] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1702.701970] binder: 21291:21292 transaction failed 29201/-28, size 24-9 line 3147
08:39:10 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8f, 0x20000)
openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x20400)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)

08:39:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7400, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:10 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xa, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:10 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x5}, 0x0, 0x6e6bb9}, {{@in=@dev, 0x0, 0x3}, 0x0, @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x9}}, 0xe8)
readahead(r0, 0x8, 0x83)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:10 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
pipe2(&(0x7f0000003940)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000003980)={'bcsh0\x00', 0x200})
recvmmsg(0xffffffffffffff9c, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/79, 0x4f}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f0000000300)=""/111, 0x6f}, {&(0x7f0000000380)=""/166, 0xa6}, {&(0x7f0000000440)=""/221, 0xdd}, {&(0x7f0000000280)=""/10, 0xa}], 0x8, &(0x7f00000005c0)=""/52, 0x34}, 0x3}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)=""/39, 0x27}, {&(0x7f0000000640)=""/227, 0xe3}, {&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/130, 0x82}, {&(0x7f0000000840)=""/13, 0xd}, {&(0x7f0000000880)=""/133, 0x85}], 0x6, &(0x7f00000009c0)=""/155, 0x9b}, 0x1}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/88, 0x58}, {&(0x7f0000000b00)=""/184, 0xb8}], 0x2, &(0x7f0000000c00)=""/201, 0xc9}, 0x37593d33}, {{&(0x7f0000000d00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000001040)=[{&(0x7f0000000d80)=""/138, 0x8a}, {&(0x7f0000000e40)=""/236, 0xec}, {&(0x7f0000000f40)=""/118, 0x76}, {&(0x7f0000000fc0)=""/124, 0x7c}], 0x4, &(0x7f0000001080)=""/18, 0x12}, 0x4a800}, {{&(0x7f00000010c0)=@tipc, 0x80, &(0x7f0000002540)=[{&(0x7f0000001140)=""/42, 0x2a}, {&(0x7f0000001180)=""/58, 0x3a}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/49, 0x31}, {&(0x7f0000002200)=""/109, 0x6d}, {&(0x7f0000002280)=""/57, 0x39}, {&(0x7f00000022c0)=""/197, 0xc5}, {&(0x7f00000023c0)=""/216, 0xd8}, {&(0x7f00000024c0)=""/92, 0x5c}], 0x9, &(0x7f0000002600)=""/42, 0x2a}, 0x9}, {{&(0x7f0000002640)=@caif, 0x80, &(0x7f0000002900)=[{&(0x7f00000026c0)=""/56, 0x38}, {&(0x7f0000002700)=""/105, 0x69}, {&(0x7f0000002780)=""/72, 0x48}, {&(0x7f0000002800)=""/113, 0x71}, {&(0x7f0000002880)=""/78, 0x4e}], 0x5, &(0x7f0000002980)=""/174, 0xae}, 0xdbf}, {{&(0x7f0000002a40)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002ac0)=""/181, 0xb5}], 0x1, &(0x7f0000002bc0)=""/161, 0xa1}, 0x8000}, {{&(0x7f0000002c80)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002d00)=""/79, 0x4f}, {&(0x7f0000002d80)=""/177, 0xb1}, {&(0x7f0000002e40)=""/211, 0xd3}, {&(0x7f0000002f40)=""/135, 0x87}, {&(0x7f0000003000)=""/221, 0xdd}, {&(0x7f0000003100)=""/242, 0xf2}], 0x6, &(0x7f0000003280)=""/147, 0x93}, 0x3ff}, {{&(0x7f0000003340)=@pppol2tpv3={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000033c0)=""/197, 0xc5}, {&(0x7f00000034c0)=""/197, 0xc5}], 0x2, &(0x7f0000003600)=""/104, 0x68}, 0x2}], 0x9, 0x40000100, &(0x7f00000038c0)={0x77359400})
setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000003900)=@rose={'rose', 0x0}, 0x10)
r3 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000039c0)={@in6={{0xa, 0x4e22, 0x7, @mcast2, 0x3}}, 0x0, 0x3, 0x0, "a424e0a986cd12c2ff8215626371f2dd352b47ffe72353eff171e4165e0afefe4270b8c0d8118d65512c7bad83f71d164c612bc5b9d8bfbb7bfde93fd458670562dfcdc0eb98f6071d2f81a427c3b290"}, 0xd8)

[ 1703.536255] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1703.559308] binder: 21471:21500 ioctl c018620b 0 returned -14
[ 1703.570969] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1703.624938] binder: 21443:21497 transaction failed 29201/-28, size 0-8 line 3147
[ 1703.668195] binder_alloc: 32531: binder_alloc_buf size 40 failed, no address space
[ 1703.676163] binder: 21443:21497 ioctl c0306201 20000440 returned -14
[ 1703.725429] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7a00, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xb, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:11 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000000080)={0x2, 0x5})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1703.817709] binder: 21471:21500 transaction failed 29201/-28, size 24-10 line 3147
08:39:11 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1703.931352] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1703.945407] binder: 21738:21741 ioctl c018620b 0 returned -14
08:39:11 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffff9c, &(0x7f0000000040)=@xdp={0x2c, 0x0, <r0=>0x0}, &(0x7f0000000180)=0x80, 0x800)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}}, {{@in=@dev, 0x0, 0x400}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1703.994795] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x5}, 0x0, 0x6e6bb9}, {{@in=@dev, 0x0, 0x3}, 0x0, @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x9}}, 0xe8)
readahead(r0, 0x8, 0x83)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1704.076820] binder_alloc: 32531: binder_alloc_buf size 40 failed, no address space
[ 1704.098442] binder: 21730:21739 transaction failed 29201/-28, size 0-8 line 3147
[ 1704.142906] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1704.194506] binder: 21730:21739 ioctl c0306201 20000440 returned -14
[ 1704.299647] binder: 21738:21752 transaction failed 29201/-28, size 24-11 line 3147
08:39:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x1000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1704.562723] binder_release_work: 4 callbacks suppressed
[ 1704.562732] binder: undelivered TRANSACTION_ERROR: 29201
[ 1704.646442] net_ratelimit: 26 callbacks suppressed
[ 1704.646450] protocol 88fb is buggy, dev hsr_slave_0
[ 1704.646546] protocol 88fb is buggy, dev hsr_slave_0
[ 1704.651670] protocol 88fb is buggy, dev hsr_slave_1
[ 1704.656706] protocol 88fb is buggy, dev hsr_slave_1
[ 1704.661778] protocol 88fb is buggy, dev hsr_slave_0
[ 1704.676774] protocol 88fb is buggy, dev hsr_slave_1
[ 1704.681853] protocol 88fb is buggy, dev hsr_slave_0
[ 1704.687033] protocol 88fb is buggy, dev hsr_slave_1
08:39:12 executing program 5:
open(&(0x7f0000000040)='./file0\x00', 0x2, 0xe1)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = dup(r0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000400)=""/4096)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000000)=0x1000c04, 0x4)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1704.804321] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xc, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1704.863474] binder: undelivered TRANSACTION_ERROR: 29201
[ 1704.896887] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:12 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x400000000000e643, 0x800)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x20300, 0x0)
r2 = fcntl$dupfd(r0, 0x406, r0)
sysfs$2(0x2, 0x401, &(0x7f0000000400)=""/255)
write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0x101bc)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f00000000c0)={0x213b18b4, 0x8000, 0x5, 0x2})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0x80000000, 0xc, [0x3, 0x7, 0x2]})
getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180)=""/23, &(0x7f00000001c0)=0x17)
ioctl$SIOCNRDECOBS(r2, 0x89e2)

08:39:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x5}, 0x0, 0x6e6bb9}, {{@in=@dev, 0x0, 0x3}, 0x0, @in=@dev, 0x0, 0x0, 0x2, 0x0, 0x9}}, 0xe8)
readahead(r0, 0x8, 0x83)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='status\x00')
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1704.929380] binder: 21889:21918 transaction failed 29201/-28, size 0-8 line 3147
[ 1704.956928] binder: 21889:21918 ioctl c0306201 20000440 returned -14
[ 1704.976025] binder: 21964:21965 ioctl c018620b 0 returned -14
[ 1705.046471] protocol 88fb is buggy, dev hsr_slave_0
[ 1705.051620] protocol 88fb is buggy, dev hsr_slave_1
08:39:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xd, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x2000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1705.257638] binder: undelivered TRANSACTION_ERROR: 29201
[ 1705.269957] binder: undelivered TRANSACTION_ERROR: 29201
08:39:12 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
getsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000001c0)={0x100, 0x549, 0x3, 0x400, 0x13, 0x6, 0x5, 0x61, 0xffffffffffffff9c, 0x200, 0x5, 0xfffffffffffff668})

08:39:12 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85)

[ 1705.647827] binder: 22067:22078 ioctl c018620b 0 returned -14
08:39:13 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0xe1, 0x10000, [], &(0x7f00000000c0)=0x8})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0xfffffff5)

[ 1705.740469] binder: 22077:22083 ioctl c0306201 20000440 returned -14
08:39:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1705.803985] binder: undelivered TRANSACTION_ERROR: 29201
08:39:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x3000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:13 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0xf, @capture={0x0, 0x1, {0x100000001, 0x1}, 0x81, 0x8000}})
ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000000)={0x0, 0x0, [], {0x0, @bt={0x1, 0xffffffff, 0x1, 0x2, 0x7fff, 0x3ff, 0x401, 0x7, 0x7ff, 0x3ff, 0x5, 0x8, 0x200, 0xfffffffffffffffc, 0x14, 0x4}}})

[ 1705.860140] binder: undelivered TRANSACTION_ERROR: 29201
[ 1705.892975] binder: 22158:22190 ioctl c018620b 0 returned -14
08:39:13 executing program 0:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8f, 0x20000)
openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x20400)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)

08:39:13 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = socket$inet_sctp(0x2, 0x4, 0x84)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000040)={'nlmon0\x00', {0x2, 0x4e22, @local}})

[ 1706.049332] binder: 22196:22199 ioctl c0306201 20000440 returned -14
08:39:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:13 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='threaded\x00', 0xfffffffffffffff8)
keyctl$setperm(0x5, r1, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:13 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x4, 0x36, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/54}, &(0x7f0000000140)=0x78)

[ 1706.176970] binder: undelivered TRANSACTION_ERROR: 29201
[ 1706.453588] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1706.453616] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1706.501607] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1706.501622] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1706.613445] binder_transaction: 5 callbacks suppressed
[ 1706.613461] binder: 22423:22464 transaction failed 29201/-28, size 0-8 line 3147
08:39:14 executing program 0:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8f, 0x20000)
openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x20400)
ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0)

08:39:14 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1706.817455] binder: 22423:22464 ioctl c0306201 20000440 returned -14
[ 1706.833054] binder: undelivered TRANSACTION_ERROR: 29201
08:39:14 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)

[ 1707.042081] binder: 22620:22630 ioctl c018620b 0 returned -14
08:39:14 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1707.147504] binder_alloc: 32531: binder_alloc_buf size 40 failed, no address space
[ 1707.162468] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:14 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00')
sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r2, 0x308, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb05c}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x14}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4000841)
connect$netlink(r1, &(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8080}, 0xc)

08:39:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x5000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1707.232445] binder: 22620:22745 transaction failed 29201/-28, size 24-16 line 3147
[ 1707.248493] binder: undelivered TRANSACTION_ERROR: 29201
08:39:14 executing program 0 (fault-call:4 fault-nth:0):
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1707.420358] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:14 executing program 1:
r0 = socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'veth1\x00', 0x2000006})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000040)={0x3, 0x3, @value})
r2 = dup(r1)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

[ 1707.532475] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1707.665465] binder: 22805:22834 transaction failed 29201/-28, size 0-8 line 3147
[ 1707.674599] binder: 22805:22834 ioctl c0306201 20000440 returned -14
08:39:15 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x3)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x11, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1708.156177] binder: undelivered TRANSACTION_ERROR: 29201
08:39:15 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1708.349660] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1708.380824] binder: 22922:22951 ioctl c018620b 0 returned -14
08:39:15 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={<r2=>0x0, 0x2}, &(0x7f00000001c0)=0xc)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="05000000be59a63e2ac18730abb030bb83f7abe9957bc4b4a34749fef1b94ae8c855ef1fbb5d4ffb36cb71f9f6d1430852d5a82c9d28c39ec9302e690a5b64a3455fd7a31e234635134118b052a22d2f438fe9ba19e41cfa196fccca506f082fa7ab52c232a3361b1a809fb90813698a4fd650ee30a18e171bda4d56eb9a5c55276ec13dc2b3192afc45b77f2966aadd5d9de74e093511c8b29abea94cc3ecab75d800f136596b9058f9d9e7a6f7000000000000000000000000a51ab1d4c763d7027c769bf8eb824aee91a73ce133c2f402ffb54e233661809a12"], 0x8)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x7fffffff, 0x6})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480), &(0x7f00000004c0)=0x14)
r3 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={<r4=>0x0, 0x2, 0x100000000, 0x2}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r4, 0x100}, &(0x7f0000000140)=0x4c2)
socket$caif_stream(0x25, 0x1, 0x3)
r5 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r6 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$negate(0xd, r5, 0x2, r6)
setsockopt$inet6_dccp_int(r3, 0x21, 0x11, &(0x7f0000000440)=0x4ee, 0x4)

08:39:15 executing program 2:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [<r1=>0x0]}, &(0x7f00000001c0)=0x8)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x8, 0x0, 0x0, 0x2, 0x2a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}}, 0x0, 0xffffffffffffffff, r2, 0x100000000000000)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x200005)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x3, 0x2, 0x4, 0x26, 0xffffffffffffff46, 0xd6b5, 0x1, r1}, &(0x7f0000000240)=0x20)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1708.422729] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1708.540453] binder: 22912:22944 transaction failed 29201/-28, size 0-8 line 3147
[ 1708.548446] binder_alloc: 32531: binder_alloc_buf size 48 failed, no address space
[ 1708.556192] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1708.598907] binder: 22912:22944 ioctl c0306201 20000440 returned -14
[ 1708.606026] binder: 22922:22951 transaction failed 29201/-28, size 24-17 line 3147
08:39:16 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2000, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'teql0\x00', {0x2, 0x4e20, @multicast2}})
connect$x25(r0, &(0x7f0000000080)={0x9, @remote={[], 0x0}}, 0x12)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={<r1=>0x0, 0x4, 0x30}, &(0x7f0000000200)=0xc)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x9, 0xa, [0xbc4d, 0x5, 0x2, 0x80000001, 0x7f, 0x8001, 0x401, 0x200, 0x3, 0x8]}, 0x1c)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x12, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:16 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$notify(r0, 0x402, 0x11)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:16 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
dup3(r0, r0, 0x80000)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1709.073752] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1709.086620] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1709.112607] binder: 23070:23073 ioctl c018620b 0 returned -14
[ 1709.122364] binder: 23066:23069 transaction failed 29201/-28, size 0-8 line 3147
08:39:16 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x02', 0xff4c)

[ 1709.203761] binder: 23066:23069 ioctl c0306201 20000440 returned -14
[ 1709.228223] binder_alloc: 32531: binder_alloc_buf size 48 failed, no address space
08:39:16 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0xb, &(0x7f0000000040)={0xff, 0x4})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1709.256969] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1709.300929] binder: 23070:23106 transaction failed 29201/-28, size 24-18 line 3147
08:39:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x8000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:16 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x1, 0x1000, &(0x7f0000000400)="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"})
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000180)={0xfad2}, 0x1)
syz_open_dev$sndmidi(&(0x7f0000000280)='/dev/snd/midiC#D#\x00', 0x3f, 0x4)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9)

08:39:16 executing program 1:
r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80, 0x80800)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={<r1=>0x0, 0x1f, 0x2, [0x3, 0x0]}, &(0x7f0000000100)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x8}, 0x8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r3 = dup(r2)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)

[ 1709.764081] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:17 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000400))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1709.820133] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1709.830178] binder: 23289:23291 transaction failed 29201/-28, size 0-8 line 3147
[ 1709.839737] binder: 23289:23291 ioctl c0306201 20000440 returned -14
08:39:17 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x2f, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1709.941759] binder_release_work: 4 callbacks suppressed
[ 1709.941768] binder: undelivered TRANSACTION_ERROR: 29201
08:39:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xa000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1710.069005] binder: undelivered TRANSACTION_ERROR: 29201
08:39:17 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1710.174701] binder: 23494:23505 ioctl c018620b 0 returned -14
[ 1710.250588] binder_alloc: 32531: binder_alloc_buf size 72 failed, no address space
08:39:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$selinux_load(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/load\x00', 0x2, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1710.349913] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:17 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x10', 0xff4c)

[ 1710.422313] binder: 23494:23507 transaction failed 29201/-28, size 24-47 line 3147
[ 1710.431508] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1710.606792] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1710.886460] net_ratelimit: 25 callbacks suppressed
[ 1710.886468] protocol 88fb is buggy, dev hsr_slave_0
[ 1710.886491] protocol 88fb is buggy, dev hsr_slave_1
[ 1710.891472] protocol 88fb is buggy, dev hsr_slave_1
[ 1710.906613] protocol 88fb is buggy, dev hsr_slave_0
[ 1710.911654] protocol 88fb is buggy, dev hsr_slave_1
[ 1710.916858] protocol 88fb is buggy, dev hsr_slave_0
[ 1710.921991] protocol 88fb is buggy, dev hsr_slave_1
08:39:18 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
pread64(r1, &(0x7f0000000000)=""/103, 0x67, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
connect(r1, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80)

[ 1711.105220] binder: 23508:23511 transaction failed 29201/-28, size 0-8 line 3147
[ 1711.120790] binder: 23508:23511 ioctl c0306201 20000440 returned -14
08:39:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x55, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1711.251152] binder: undelivered TRANSACTION_ERROR: 29201
[ 1711.286467] protocol 88fb is buggy, dev hsr_slave_0
[ 1711.291576] protocol 88fb is buggy, dev hsr_slave_1
[ 1711.296740] protocol 88fb is buggy, dev hsr_slave_0
08:39:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x12000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:18 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=<r2=>0x0)
ptrace$peek(0x1, r2, &(0x7f0000000080))
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-monitor\x00', 0x4000, 0x0)
ioctl$VT_RESIZE(r3, 0x5609, &(0x7f00000001c0)={0xffffffff, 0xffffffff80000000, 0x10000})

[ 1711.338783] binder: undelivered TRANSACTION_ERROR: 29201
[ 1711.483432] binder: 23680:23770 ioctl c018620b 0 returned -14
[ 1711.534200] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1711.543598] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1711.554520] binder: 23765:23870 ioctl c0306201 20000440 returned -14
[ 1711.577426] binder_alloc: 32531: binder_alloc_buf size 112 failed, no address space
08:39:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x20000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:18 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1711.615019] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1711.631524] binder: undelivered TRANSACTION_ERROR: 29201
[ 1711.638185] binder_transaction: 1 callbacks suppressed
[ 1711.638215] binder: 23680:23904 transaction failed 29201/-28, size 24-85 line 3147
08:39:19 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xfffffffffffffffe, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1711.894140] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1712.042964] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1712.051875] binder: 23937:23938 transaction failed 29201/-28, size 0-8 line 3147
[ 1712.093467] binder: 23937:23938 ioctl c0306201 20000440 returned -14
08:39:19 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xffffffffffff37db, 0x4000)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6cb)

08:39:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x3f000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x56, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1712.510376] binder: undelivered TRANSACTION_ERROR: 29201
[ 1712.576916] binder: undelivered TRANSACTION_ERROR: 29201
[ 1712.638631] binder: 24056:24072 ioctl c018620b 0 returned -14
08:39:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000000)={<r2=>0x0, @in6={{0xa, 0x4e24, 0x5, @remote, 0x80000000}}}, &(0x7f00000000c0)=0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x7, 0x20000000000000, 0x7, 0x7fff, 0x2}, &(0x7f0000000140)=0x14)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x4}, 0x2)

08:39:20 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0xc0000000000, {0x1, 0x0, 0xfe4, 0x7, 0x5}})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1712.701309] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1712.730359] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1712.899552] binder_alloc: 32531: binder_alloc_buf size 112 failed, no address space
[ 1712.917770] binder: 24047:24133 transaction failed 29201/-28, size 0-8 line 3147
[ 1712.944672] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1712.967705] QAT: Invalid ioctl
08:39:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x40000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1713.025635] binder: 24047:24133 ioctl c0306201 20000440 returned -14
[ 1713.051889] binder: undelivered TRANSACTION_ERROR: 29201
[ 1713.058196] binder: 24056:24072 transaction failed 29201/-28, size 24-86 line 3147
08:39:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x62, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:20 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1713.128318] binder: undelivered TRANSACTION_ERROR: 29201
[ 1713.326741] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:20 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000000))

[ 1713.450737] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1713.462295] binder: 24323:24374 ioctl c018620b 0 returned -14
[ 1713.498794] binder: 24282:24339 transaction failed 29201/-28, size 0-8 line 3147
[ 1713.537419] binder_alloc: 32531: binder_alloc_buf size 128 failed, no address space
[ 1713.545385] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1713.560414] QAT: Invalid ioctl
[ 1713.590386] binder: 24282:24339 ioctl c0306201 20000440 returned -14
[ 1713.695615] binder: 24323:24376 transaction failed 29201/-28, size 24-98 line 3147
08:39:21 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, <r1=>0x0}, &(0x7f0000000180)=0xc)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@initdev}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8)
fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getresgid(&(0x7f0000000500), &(0x7f0000000540)=<r5=>0x0, &(0x7f0000000580))
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000010002000000000002000000", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000300", @ANYRES32=r3, @ANYBLOB="040006000000000008000100", @ANYRES32=r4, @ANYBLOB='\b\x00%\x00', @ANYRES32=r5, @ANYBLOB="10000100000000002000060000000000"], 0x4c, 0x2)
r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x400000, 0x0)
ioctl$SG_GET_SG_TABLESIZE(r7, 0x227f, &(0x7f0000000680))
write$cgroup_type(r6, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x48000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1714.003015] binder: undelivered TRANSACTION_ERROR: 29201
08:39:21 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40, 0x0)
write$P9_RLERROR(r1, &(0x7f0000000080)={0xe, 0x7, 0x2, {0xfffffffffffffd13, 'ppp1^'}}, 0xe)

[ 1714.263309] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x2}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:21 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)

[ 1714.357697] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:21 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1714.418585] binder: 24594:24609 ioctl c018620b 0 returned -14
[ 1714.433065] binder: 24540:24576 transaction failed 29201/-28, size 0-8 line 3147
[ 1714.446806] binder: 24540:24576 ioctl c0306201 20000440 returned -14
[ 1714.489728] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1714.515023] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1714.567958] binder: 24594:24650 transaction failed 29201/-28, size 24-8 line 3147
08:39:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4c000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
dup(r0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$BLKTRACESTOP(r1, 0x1275, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {}, {}, {<r2=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000200)={r2, 0x8, &(0x7f0000000100)=[0x1ff, 0x9, 0x5e7d044c, 0xe000000000000000, 0x401, 0x8, 0x80, 0x800], &(0x7f0000000140)=[0x1ff], 0x37, 0x5, 0x401, &(0x7f0000000180)=[0x7, 0x9, 0x2, 0x8, 0x6], &(0x7f00000001c0)=[0x7, 0x3, 0x3, 0x3]})

08:39:22 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev}, 0x0, @in=@dev, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xaed8210}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x800000007ffffffe, 0xfffffffffffffffd)
r2 = dup(r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b700000000000100bfa30000000000000703000028feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000011d400300000000006506000001ed00002704000000ffffffad460000000000006a0a00fe00000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000100)='P\\\x88\x1c'}, 0x48)
write$cgroup_type(r2, &(0x7f0000000280)='threaded\x00', 0x19a)
getresuid(&(0x7f0000000180), &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000200))
r5 = getgid()
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000240)={'yam0\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39, 0x1, [0x2]}})
fchown(r0, r4, r5)
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x3f, 0x6, 0x8, "30421232f6598df20fc5067a6a1669aa", "2b99f428ff837dafc98e40f3f716fcb251bac05d90787dd8aa29605255439b2f8247c57ada9917cadbfc"}, 0x3f, 0x3)

08:39:22 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
dup(r0)

[ 1715.059577] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1715.146881] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1715.268853] binder: 24805:24821 transaction failed 29201/-28, size 0-8 line 3147
08:39:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x3}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1715.335541] binder_release_work: 2 callbacks suppressed
[ 1715.335550] binder: undelivered TRANSACTION_ERROR: 29201
[ 1715.374450] binder: 24805:24821 ioctl c0306201 20000440 returned -14
08:39:22 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x14, 0x89f615c8497dc4a9)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x8001, 0x400})
dup(r0)

[ 1715.545301] binder: 25017:25018 ioctl c018620b 0 returned -14
08:39:22 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x60000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1715.647175] binder: 25017:25021 transaction failed 29201/-28, size 24-8 line 3147
[ 1715.677312] binder: undelivered TRANSACTION_ERROR: 29201
08:39:23 executing program 5:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0)
statx(r0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1715.966207] binder: 25058:25139 ioctl c0306201 20000440 returned -14
[ 1716.284184] binder: undelivered TRANSACTION_ERROR: 29201
08:39:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x68000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1716.407161] binder: undelivered TRANSACTION_ERROR: 29201
08:39:23 executing program 1:
syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x4, 0x800)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000100)={0x7ff, {0x7, 0x0, 0x5, 0x8, 0x4, 0x7ff}})
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140))
r2 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)
getrusage(0xffffffffffffffff, &(0x7f0000000000))

[ 1716.623993] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1716.624003] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1716.681330] binder: 25317:25347 ioctl c018620b 0 returned -14
[ 1716.682682] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1716.682695] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:24 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x5, 0x9}, 'port1\x00', 0xb0, 0x20050, 0xe9, 0x3, 0x6, 0x20, 0x80000000, 0x0, 0x5, 0x80000001})
r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x2000)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2})

[ 1716.749737] binder_transaction: 1 callbacks suppressed
[ 1716.749753] binder: 25298:25341 transaction failed 29201/-28, size 0-8 line 3147
[ 1716.764234] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1716.765174] binder: 25298:25341 ioctl c0306201 20000440 returned -14
08:39:24 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1716.799362] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1716.831936] binder: 25317:25408 transaction failed 29201/-28, size 24-8 line 3147
[ 1716.884120] binder: undelivered TRANSACTION_ERROR: 29201
[ 1717.126958] net_ratelimit: 24 callbacks suppressed
[ 1717.127100] protocol 88fb is buggy, dev hsr_slave_0
[ 1717.137709] protocol 88fb is buggy, dev hsr_slave_1
[ 1717.143568] protocol 88fb is buggy, dev hsr_slave_0
[ 1717.149122] protocol 88fb is buggy, dev hsr_slave_1
[ 1717.155413] protocol 88fb is buggy, dev hsr_slave_0
[ 1717.155577] protocol 88fb is buggy, dev hsr_slave_0
[ 1717.160549] protocol 88fb is buggy, dev hsr_slave_1
[ 1717.165900] protocol 88fb is buggy, dev hsr_slave_1
[ 1717.476222] binder: undelivered TRANSACTION_ERROR: 29201
[ 1717.526443] protocol 88fb is buggy, dev hsr_slave_0
[ 1717.531552] protocol 88fb is buggy, dev hsr_slave_1
08:39:24 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x3, 0xd, 0x4, 0x1001, {}, {0x5, 0xd, 0x1f, 0x1ff, 0x1, 0x3407, "c11fb557"}, 0xffffffffffff0001, 0x4, @userptr=0x7, 0x4})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:24 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:39:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6c000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:24 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180))
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x5}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:24 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1717.730492] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1717.766528] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1717.781786] binder: 25554:25561 ioctl c018620b 0 returned -14
08:39:25 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1717.896764] binder: 25555:25559 transaction failed 29201/-28, size 0-8 line 3147
[ 1717.909809] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1717.915244] binder: 25555:25559 ioctl c0306201 20000440 returned -14
08:39:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x74000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1717.960909] binder: undelivered TRANSACTION_ERROR: 29201
[ 1717.976738] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1718.417262] binder: 25554:25561 transaction failed 29201/-28, size 24-8 line 3147
08:39:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:25 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev, 0x0, 0x3f}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x6}}, 0x18)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={<r2=>0x0, 0x1ff}, &(0x7f0000000240)=0x8)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8003, &(0x7f00000002c0)=0x26, 0x32, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r2, 0x1000, "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"}, &(0x7f0000000280)=0x1008)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000001c0)=0x1000)
write$P9_RLCREATE(r1, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x40, 0x1, 0x4}, 0x3}}, 0x18)

[ 1718.652044] binder: undelivered TRANSACTION_ERROR: 29201
[ 1718.746071] binder: 25711:25714 ioctl c018620b 0 returned -14
[ 1718.766855] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1718.774739] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1718.823485] binder: 25708:25770 transaction failed 29201/-28, size 0-8 line 3147
[ 1718.831896] binder: 25708:25770 ioctl c0306201 20000440 returned -14
[ 1718.839572] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:39:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7a000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1718.864466] binder: undelivered TRANSACTION_ERROR: 29201
[ 1718.886680] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1718.910823] binder: 25711:25875 transaction failed 29201/-28, size 24-8 line 3147
08:39:26 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:39:26 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:26 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000180)=""/230)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1719.048943] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1719.111765] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1719.221152] binder: 25886:25887 transaction failed 29201/-28, size 0-8 line 3147
[ 1719.291689] binder: 25886:25887 ioctl c0306201 20000440 returned -14
08:39:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xfdfdffff, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1719.681258] binder: undelivered TRANSACTION_ERROR: 29201
08:39:27 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x3328e5a2a4a79646, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080)=0x800000000000, 0x4)
bind$netrom(r0, &(0x7f0000000180)={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @default]}, 0x48)
getuid()
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)

08:39:27 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x4c80, 0xfffffffffffffffe)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80800)
ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000100)="f905d398e608dbf03e4f058271979f54497e46878378b40fd92693049d55e13b7524491b8fe0b589564faff1c7a702e2ce0763395943b21f3f0c8b7e3eaa842c223cb72448b8c9a8a82366620b6cdd7d14eb9933d3")
fadvise64(r0, 0x0, 0x9, 0x3)

[ 1720.114905] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1720.181054] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1720.258433] binder: 26040:26117 transaction failed 29201/-28, size 0-8 line 3147
[ 1720.270327] binder: 26040:26117 ioctl c0306201 20000440 returned -14
08:39:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xfffffdfd, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1720.316927] binder: 26226:26242 ioctl c018620b 0 returned -14
08:39:27 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x101000, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2440, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="581ba20d3fa975bb7452c2e3ec1c31b2", 0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={<r3=>0x0, 0x8fb, 0xc69a, 0x7, 0x101, 0x3}, &(0x7f0000000180)=0x14)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={r3, 0x73}, &(0x7f0000000200)=0x8)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0)
r4 = dup(r0)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000140)={0xfffffffffffffffd, 0x7, 0x6c})
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c80, 0xfffffffffffffffe)

[ 1720.370748] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1720.386591] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1720.397910] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1720.407144] binder: 26226:26314 transaction failed 29201/-28, size 24-8 line 3147
08:39:27 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x40800, 0x0)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000002c0))
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1720.415759] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1720.435403] binder: 26295:26315 transaction failed 29201/-28, size 0-8 line 3147
[ 1720.444799] Unknown ioctl 22025
[ 1720.450009] binder: 26295:26315 ioctl c0306201 20000440 returned -14
[ 1720.503202] binder_release_work: 2 callbacks suppressed
[ 1720.503210] binder: undelivered TRANSACTION_ERROR: 29201
08:39:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200000000}, {0x0, 0x0, 0x0, 0x0, 0x20000000000}, {}, 0x0, 0x0, 0x800000000, 0x0, 0x2}, {{@in=@dev}, 0x0, @in=@dev}}, 0xfffffdad)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:27 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x100000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:27 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x1, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1720.875277] binder: 26427:26430 ioctl c0306201 20000440 returned -14
[ 1720.925126] binder: undelivered TRANSACTION_ERROR: 29201
08:39:28 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4000080, 0x0)
recvfrom$ax25(r0, &(0x7f0000000180)=""/156, 0x9c, 0x2000, &(0x7f0000000240)={{0x3, @null, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
exit_group(0xffff)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
write$smack_current(r0, &(0x7f0000000040)='threaded\x00', 0x9)

08:39:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x200000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xa}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1721.262465] binder: undelivered TRANSACTION_ERROR: 29201
[ 1721.465124] binder: 26597:26638 ioctl c018620b 0 returned -14
[ 1721.500795] binder: 26583:26651 ioctl c0306201 20000440 returned -14
08:39:28 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
set_thread_area(&(0x7f0000000040)={0x5, 0xffffffffffffffff, 0x4000, 0x81, 0x5, 0x8001, 0x2, 0x0, 0x8, 0x4})
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10100, 0x0)
ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000180)={0x0, 0x1, 0x0, [{0x10001, 0x3f, 0x6, 0x1, 0x5, 0x3, 0x5}]})

08:39:28 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000200)={0x8001007, 0x4, 0x1})
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r1)
ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000100)=@null)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140))
ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @default, r3})
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

08:39:28 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000280)=0xe8)
r3 = syz_open_dev$mice(&(0x7f00000002c0)='/dev/input/mice\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000680)=0x1, 0x4)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000006c0)='/selinux/relabel\x00', 0x2, 0x0)
syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180)="7aa7069f7784628bd0f1ea9525dd97140aa10f2fc68807de8d06fd733aa63646fc3d9a736f35b8a9a160e5b72b9badf5c8583241349119d4ef303c212321d3fbf61e6155831fa6c1cf6ac4a8fb8e7b1ba6ac3ec47c8e14926589d3524547c38a5731d7d8449dc87f33187b6089a7b03254f73c7b375b2528ecbd1d077416b6f028f8315801bff0a6e343157b3a6c2e1c4a58d02241ba95bf79332ad34f1986d43187ae20e122c077b8edc5aa09c547cc723c57e7", 0xb4, 0x3}, {&(0x7f0000000400)="4037d33687e5c22e30ed7efdda5a3c432913a43e2adad16c6f33cf9fb0333fffbc8a0179f1495ebbe7946eb3f4a3e03bcc652e7b1dc0fca014fb327b88fe47fdd9e0241617d6644006023d0e3a21fd577d791e24a0fb88eb8fa4cb0d327d8eb705330d39c71feaf089326ee61793c80fb204d49021e7ab78002431f90526675c38125556fe64d2b44ee0117aa93f39fa1284b9d45eba9324f0c20247e2f13141a618dcf204537db31b66e685416809f37d101b89ede3aacc06ada5cbcb953a416530b1ca0e49161a217076bc25d001d9c2ed3f630b11631a337eb62469ce43886c231f38643ffe8048c5dd30ee6dcc1632d060ad21", 0xf5, 0x5}], 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB='dptacow,fsname=(wlan0,smackfsdef=\\,fowner=', @ANYRESDEC=r2, @ANYBLOB=',fscontext=user_u,\x00'])

08:39:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x300000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:28 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1721.604624] binder: undelivered TRANSACTION_ERROR: 29201
[ 1722.222532] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1722.222542] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1722.274483] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1722.274497] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1722.314943] binder_transaction: 3 callbacks suppressed
[ 1722.314960] binder: 26710:26754 transaction failed 29201/-28, size 0-8 line 3147
[ 1722.366038] binder: 26710:26754 ioctl c0306201 20000440 returned -14
[ 1722.423591] binder: undelivered TRANSACTION_ERROR: 29201
08:39:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x400000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:29 executing program 1:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040))
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r2 = dup(r1)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)

08:39:29 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
pread64(r0, &(0x7f0000000180)=""/106, 0x6a, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4001, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000080)=0x1c, 0x4)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1722.465263] binder: undelivered TRANSACTION_ERROR: 29201
08:39:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x12}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1722.731740] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1722.791836] binder: 26885:26888 ioctl c018620b 0 returned -14
[ 1722.839205] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1722.975198] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1722.984401] binder: 26883:26886 transaction failed 29201/-28, size 0-8 line 3147
[ 1723.019411] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xffffffffffffffab)

08:39:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1723.068810] binder: 26883:26886 ioctl c0306201 20000440 returned -14
[ 1723.103296] binder: 26885:26888 transaction failed 29201/-28, size 24-8 line 3147
08:39:30 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x500000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1723.316980] binder: undelivered TRANSACTION_ERROR: 29201
08:39:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x48}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1723.366457] net_ratelimit: 26 callbacks suppressed
[ 1723.366465] protocol 88fb is buggy, dev hsr_slave_0
[ 1723.366499] protocol 88fb is buggy, dev hsr_slave_1
[ 1723.371453] protocol 88fb is buggy, dev hsr_slave_1
[ 1723.376551] protocol 88fb is buggy, dev hsr_slave_0
[ 1723.390431] binder: undelivered TRANSACTION_ERROR: 29201
[ 1723.391563] protocol 88fb is buggy, dev hsr_slave_1
[ 1723.402109] protocol 88fb is buggy, dev hsr_slave_0
[ 1723.407235] protocol 88fb is buggy, dev hsr_slave_1
08:39:30 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8)
recvfrom$packet(r1, &(0x7f0000000000)=""/182, 0xb6, 0x2, &(0x7f0000000200)={0x11, 0x1f, r2, 0x1, 0x100000000, 0x6, @broadcast}, 0x14)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1723.463730] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1723.481757] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1723.492011] binder: 27182:27240 transaction failed 29201/-28, size 0-8 line 3147
[ 1723.505515] binder: 27182:27240 ioctl c0306201 20000440 returned -14
08:39:30 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x28)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000180)={{0x2, 0x0, 0x1, 0x2, 0x10001}, 0x7, 0x2, 0xdc56})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1723.515643] binder: 27253:27306 ioctl c018620b 0 returned -14
08:39:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x414480, 0x0)
ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f00000001c0)={0xfff, "53fbbb3204aa17bae4f02246ca976247ce9fc4d5930c0ac690670d7fc11ff361", 0x7, 0x2, 0x2, 0x1, 0x7, 0x2, 0x7, 0x10000})
r1 = pkey_alloc(0x0, 0x2)
pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, r1)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000280)=0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
write(r2, &(0x7f0000000040)="4e06c0329c74248e18d4dbc76784b0f0fca662ad7aa36ec51247667d2d234762852a7e1d3b3b654e6d2c7bf26d00dea793677b574fb2894bac560c23fde4c03b5a2a73b99d532577f4d392eb83fb9f3bdf117ec3fdd7d9709678401f5b7994eb0453cd6e0199c1b19ecda5d8dd5d", 0x6e)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000240)={0x2, 0x20, [0x5a, 0x2, 0x6, 0x0, 0x14f7420, 0x1, 0x4, 0x8]})
socket$caif_seqpacket(0x25, 0x5, 0x5)

[ 1723.568684] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1723.589498] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1723.604731] binder: undelivered TRANSACTION_ERROR: 29201
08:39:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x600000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1723.612713] binder: 27253:27308 transaction failed 29201/-28, size 24-8 line 3147
[ 1723.766450] protocol 88fb is buggy, dev hsr_slave_0
[ 1723.771608] protocol 88fb is buggy, dev hsr_slave_1
[ 1723.776765] protocol 88fb is buggy, dev hsr_slave_0
[ 1723.940301] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1724.025957] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:31 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x2001000c)

[ 1724.270610] binder: 27317:27334 transaction failed 29201/-28, size 0-8 line 3147
08:39:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4c}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1724.388048] binder: undelivered TRANSACTION_ERROR: 29201
[ 1724.408446] binder: 27317:27334 ioctl c0306201 20000440 returned -14
08:39:31 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x40, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000200)=0x8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x2000, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9)
r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x800, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x9, 0x3, 0x390, 0x158, 0x0, 0x0, 0x158, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x3, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf0, 0x158, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x9, 0x1f, 0x8, 'pptp\x00', 'syz1\x00', 0x10001}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}, @common=@srh={0x30, 'srh\x00', 0x0, {0x3f, 0x5029, 0xa764, 0x7f, 0x9, 0x100, 0x1000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffffffffffff9, 'syz0\x00', 0x7fffffff}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
write$UHID_CREATE(r2, 0xfffffffffffffffd, 0x0)

08:39:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x700000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1724.642118] binder: 27482:27531 ioctl c018620b 0 returned -14
[ 1724.706319] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1724.768345] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:32 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:32 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
sendmmsg$nfc_llcp(r1, &(0x7f00000015c0)=[{&(0x7f0000000000)={0x27, 0x1, 0x2, 0x2, 0x3, 0xffff, "97e0b59b97d64382cdfd1648b47cbf6a037166891a503a830313e7f3a5a9255057f1857eba9863f145af0435ef65cce588bb3da239c82ace70385f2d772bb9", 0x38}, 0x60, &(0x7f0000000100)=[{&(0x7f0000000080)="fe11b38d1cb281b1ca87dd29d1dbebcbfe5b1078ae32ea0ebd0af82e79e8ddce9a7dae53bd4e028bda15180efa48c8e1a9628b479de6195f75a4278e4d3303c1f6c4bfb9c11d890ab62aa9eacaa0", 0x4e}], 0x1, &(0x7f0000000140)={0xb8, 0x113, 0x1ff, "49a3aa323c9e5b13921ec010d1d227052e7b9586429429ce9e596888d1095b6e5ce2afa5adf292aef2806131a3bcb2e2b577cbd1912e32646072b876557dddfae568e65df62e0c0d8973131ef6d5e6371e18704a1b723200c792ed3661f10479b4c7025cead8e814a2c369f04f955a87d2e44d945323e480dbecb0dd76691be0bed67e97c66061ddcc6a3cf5a501e9455cd2661d8fd2fef990525a115c971ed8432f87777d"}, 0xb8, 0x1}, {&(0x7f0000000200)={0x27, 0x0, 0x1, 0x5, 0x80000000, 0x80000000, "0bbce3092b98ca4f7443d92d2be26518ea38d61c7555ef64c939dda051cbff3c6d47598159d83321b0bf8ec956e628a63d44f4906c0f6230809c994f10a5a7", 0x25}, 0x60, &(0x7f00000013c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000280)="0fbd9058ce389441a8d0529d10e3302c3faadd0d71a2ccb5f4503a5e024df4aa90dfd46ea48b65e96433b2bb6778859551fd038dd19f69ebafd2", 0x3a}, {&(0x7f0000001300)="6f1d6bf6cc5e536ef0d3dc0b6240a32f7ef10eefcb2082b5eeb8306fe7c104a67da512451593d47ed4e7a21dc80dab9c40b470d542fe5a5d87f2d37097728222ecd73afe9956560607c1c64d31f84106061686a305d580f7741110e42aaccfe3c395006e8a041b8ada95a463953ea07408912410b741312e893d35565036c2412f79", 0x82}], 0x3, &(0x7f0000001400)={0x50, 0x0, 0x7, "c7b5b5f0107826a5912e4b1cde5a2900a5f13e258aec735b5320c74269603e625b534ee3d393f5ff93cf828d3eaf7b9af507b2f8fa7497e4d202eb3a8aa0"}, 0x50, 0x1}, {&(0x7f0000001480)={0x27, 0x0, 0x0, 0x7, 0x8, 0x4, "0e6bda078c13972dadaf80e5d288049566987d597f3e418d1e859cd1e96e9d37833c9bb31565a3e0a9d13d190f2ec062d45e4fec658de75cd5a47d7cb3e28c", 0x19}, 0x60, &(0x7f0000001580)=[{&(0x7f0000001500)="0537a22c1b09c4517bbc5e1c99c41777340c1dc7667fb167dbbba8e72c154475155f10662fac3559dd3f813e73e42d1f9bef15dca62aab738c6ed923bcd0fb9d8c91544c82e74f618cb3705ee6432c2af80823e73b2d4820bc361854d61d3bf10bab57e6a431", 0x66}], 0x1, 0x0, 0x0, 0x4}], 0x3, 0x4000000)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
setsockopt$inet6_tcp_int(r1, 0x6, 0xf, &(0x7f0000001680)=0x9, 0x4)

[ 1724.819798] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1724.828544] binder: 27482:27531 transaction failed 29201/-28, size 24-8 line 3147
08:39:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x60}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1724.887014] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1724.926793] binder: 27534:27536 transaction failed 29201/-28, size 0-8 line 3147
[ 1724.934466] binder: 27534:27536 ioctl c0306201 20000440 returned -14
[ 1724.999553] binder: 27541:27543 ioctl c018620b 0 returned -14
08:39:32 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x2c00, 0x203, 0x0)
prctl$PR_SET_TSC(0x1a, 0x2)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1725.183631] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1725.242671] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1725.252043] binder: 27541:27550 transaction failed 29201/-28, size 24-8 line 3147
08:39:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x800000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1726.122053] binder_release_work: 2 callbacks suppressed
[ 1726.122061] binder: undelivered TRANSACTION_ERROR: 29201
08:39:33 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

08:39:33 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x43a601, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4)
fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x200, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{0x0, 0x9, 0x9, 0x1}, 'syz0\x00', 0x15})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x68}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1726.492982] binder: undelivered TRANSACTION_ERROR: 29201
[ 1726.535631] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1726.630626] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1726.646887] binder: 27782:27854 transaction failed 29201/-28, size 0-8 line 3147
[ 1726.655633] binder: 27782:27854 ioctl c0306201 20000440 returned -14
[ 1726.758238] binder: 27869:27950 ioctl c018620b 0 returned -14
[ 1726.810009] binder: undelivered TRANSACTION_ERROR: 29201
08:39:34 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)

08:39:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x4080, 0xa3)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, {0x3, 0x7, 0xd789, 0xbe}})

08:39:34 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x608000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x7, @ipv4={[], [], @multicast1}, 0x5}, {0xa, 0x4e24, 0x4cce, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, r2, 0x802}}, 0x48)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xa00000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:34 executing program 1:
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
open(&(0x7f0000000000)='./file0\x00', 0x2400, 0x4)

[ 1727.065943] binder: 27998:28006 ioctl c0306201 20000440 returned -14
08:39:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x1200000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1727.275387] binder: undelivered TRANSACTION_ERROR: 29201
[ 1727.481621] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1727.481631] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1727.497948] binder: 27869:27965 ioctl c018620b 0 returned -14
08:39:34 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x10)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1727.591132] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1727.591146] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1727.606855] binder: undelivered TRANSACTION_ERROR: 29201
[ 1727.666736] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1727.674677] binder_transaction: 2 callbacks suppressed
[ 1727.674695] binder: 28225:28294 transaction failed 29201/-28, size 0-8 line 3147
[ 1727.693154] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1727.703195] binder: 27869:28312 transaction failed 29201/-28, size 24-8 line 3147
08:39:35 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x46, 0x2001)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@broadcast}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0xfffffffffffffffd)
getpeername$packet(r0, &(0x7f0000000580)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000600)={@local, r2}, 0x14)
recvfrom$inet(r1, &(0x7f0000000040)=""/96, 0x60, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@local}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8)
syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0xfffffffffffffffb, 0x800)

[ 1727.705892] binder: 28225:28294 ioctl c0306201 20000440 returned -14
[ 1727.711206] binder: undelivered TRANSACTION_ERROR: 29201
08:39:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6c}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x2000000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:35 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syncfs(r0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1727.765163] binder: undelivered TRANSACTION_ERROR: 29201
08:39:35 executing program 1:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/dev/loop-control\x00')
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x20ff, 0x0)
r2 = dup(r1)
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c80, 0xfffffffffffffffe)
fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={<r3=>0xffffffffffffffff, r2, 0x0, 0x2, &(0x7f0000000240)='\'\x00'}, 0x30)
perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x5, 0x9, 0x1, 0x9, 0x0, 0x5, 0x202, 0x4, 0x10, 0x20, 0x59, 0x7ff, 0x40, 0x6, 0x3, 0x3, 0x3, 0x3, 0x4, 0x2, 0x5, 0x4e1, 0x2, 0xb4, 0x6, 0x2, 0x3, 0x1, 0x4, 0x5, 0x81, 0x51, 0x1, 0x2, 0x800, 0x4, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180), 0x4}, 0x18210, 0x8ac3, 0x8, 0x7, 0x9, 0x6, 0x1}, r3, 0xd, r2, 0x1)

[ 1727.855197] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1727.875949] binder: 28405:28437 ioctl c018620b 0 returned -14
[ 1727.883133] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1727.895831] binder: 28403:28406 transaction failed 29201/-28, size 0-8 line 3147
08:39:35 executing program 0:
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x2840)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x20002, 0x0)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x101001, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe443, 0xffffffffffffffff)
syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x14801)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000200)=0xffffffff80000000)

[ 1727.905691] binder: 28403:28406 ioctl c0306201 20000440 returned -14
[ 1727.931649] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:39:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x3f00000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:35 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
dup2(r1, r0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1727.986617] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1728.013344] binder: 28405:28532 transaction failed 29201/-28, size 24-8 line 3147
[ 1728.030635] binder: undelivered TRANSACTION_ERROR: 29201
08:39:35 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x80000)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080))
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)

08:39:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)

[ 1728.150878] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1728.171349] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1728.249335] binder: 28599:28637 transaction failed 29201/-28, size 0-8 line 3147
[ 1728.305553] binder: 28599:28637 ioctl c0306201 20000440 returned -14
08:39:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4000000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1728.628637] binder: undelivered TRANSACTION_ERROR: 29201
08:39:35 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000000))

08:39:36 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={<r2=>0x0, 0x2}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000200)=0x8)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x74}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:36 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
getxattr(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)=@random={'osx.', 'mime_typeuser,,\x00'}, &(0x7f0000000740)=""/87, 0x57)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20003, 0x140)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000400), r2, 0x1}}, 0x18)
r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
r4 = request_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000680)='em1\x00', 0x0)
keyctl$search(0xa, r3, &(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, r4)

[ 1728.737561] binder: undelivered TRANSACTION_ERROR: 29201
[ 1728.797929] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1728.821423] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:36 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fadvise64(r0, 0x0, 0x5, 0x1)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1728.929488] binder: 28956:28962 transaction failed 29201/-28, size 0-8 line 3147
[ 1728.942026] binder: 28956:28962 ioctl c0306201 20000440 returned -14
[ 1729.051547] binder: 28960:29000 ioctl c018620b 0 returned -14
08:39:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4800000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1729.235185] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1729.243141] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1729.252129] binder: 28960:29008 transaction failed 29201/-28, size 24-8 line 3147
08:39:36 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x4c80, 0xfffffffffffffffe)

[ 1729.601062] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1729.606471] net_ratelimit: 24 callbacks suppressed
[ 1729.606479] protocol 88fb is buggy, dev hsr_slave_0
[ 1729.608880] protocol 88fb is buggy, dev hsr_slave_0
[ 1729.613680] protocol 88fb is buggy, dev hsr_slave_1
[ 1729.618705] protocol 88fb is buggy, dev hsr_slave_1
[ 1729.633837] protocol 88fb is buggy, dev hsr_slave_0
[ 1729.638922] protocol 88fb is buggy, dev hsr_slave_1
[ 1729.644043] protocol 88fb is buggy, dev hsr_slave_0
[ 1729.649129] protocol 88fb is buggy, dev hsr_slave_1
[ 1729.692884] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1730.006434] protocol 88fb is buggy, dev hsr_slave_0
[ 1730.011541] protocol 88fb is buggy, dev hsr_slave_1
[ 1730.132420] binder: 29075:29118 transaction failed 29201/-28, size 0-8 line 3147
08:39:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7a}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:37 executing program 5:
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000440)=@assoc_value={<r1=>0x0, 0xc36b}, &(0x7f0000000480)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000004c0)={r1, 0x4, 0x80, 0x400, 0x8001, 0x15}, &(0x7f0000000500)=0x14)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000000000000}}, {{@in=@dev}, 0x0, @in=@dev, 0x0, 0x1}}, 0xe8)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x2d8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1000, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x2)
prctl$PR_MCE_KILL(0x21, 0x1, 0x1)
getsockname(r2, &(0x7f0000000180)=@hci={0x1f, <r4=>0x0}, &(0x7f0000000200)=0x80)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000280)={'ah\x00'}, &(0x7f00000002c0)=0x1e)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000400)={r4, 0x1, 0x6, @remote}, 0x10)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r3, 0x0)

08:39:37 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
timerfd_create(0x6, 0x80000)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1730.189077] binder: 29075:29118 ioctl c0306201 20000440 returned -14
08:39:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x4c00000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:37 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x20800, 0x10)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1730.294128] binder: 29282:29285 ioctl c018620b 0 returned -14
[ 1730.355459] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1730.372711] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1730.383204] binder: 29287:29301 transaction failed 29201/-28, size 0-8 line 3147
[ 1730.391346] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1730.395839] binder: 29287:29301 ioctl c0306201 20000440 returned -14
08:39:37 executing program 5:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5a2, 0x440)
dup(0xffffffffffffff9c)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x585000, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x88001, 0x0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0)
statx(r0, 0x0, 0xffffffffffffbffd, 0x84, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6000000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1730.413533] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1730.424072] binder: 29282:29352 transaction failed 29201/-28, size 24-8 line 3147
08:39:37 executing program 1:
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x4c80, 0xfffffffffffffffe)

08:39:37 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040))

[ 1730.748177] binder: 29505:29507 ioctl c0306201 20000440 returned -14
08:39:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000000)={0x4, 0x6, {0x51, 0x6, 0xdd, {0x0, 0x7e1}, {0xf98, 0x9}, @cond=[{0x8, 0x8000, 0x5, 0x0, 0x97, 0x8}, {0x7, 0x7f, 0x6, 0x533, 0x401, 0x5}]}, {0x57, 0x4, 0x0, {0x7, 0x8}, {0x1000, 0x4c}, @const={0x71fc, {0xb54, 0x80000001, 0x2, 0x2}}}})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x2, 0x1000}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r2, 0x4, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}, @ib={0x1b, 0xff, 0x100, {"bd9a6a6523c65efd6e32db2fc98f23f5"}, 0xfffffffffffffffb, 0x2, 0x7}}}, 0x118)
ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000240)={0xfffffffffffffbff, 0x8, 0x800})
ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x4c80, 0xfffffffffffffffe)

08:39:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6800000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200)
write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0xfffffffffffffff9}, 0xf)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe43f, 0x2)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1731.104018] binder: 29517:29518 ioctl c0306201 20000440 returned -14
08:39:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x300}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:38 executing program 0:
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x10000, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffff001, 0x2001)
socket(0x2, 0x8000b, 0x5)
r0 = syz_open_dev$cec(&(0x7f00000004c0)='/dev/cec#\x00', 0x1, 0x2)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x6c00000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:38 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000400)={{0x3, 0x7, 0x3, 0x1ff, 'syz0\x00'}, 0x1, [0x3f, 0xfffffffffffffeff, 0x2933, 0x3, 0x9, 0x0, 0x6, 0x8, 0x2, 0x100000000, 0x1800, 0x3, 0x4, 0x9, 0x8, 0x401, 0x5b4, 0x10001, 0x401, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x8001, 0xff, 0x5, 0x254, 0x8df, 0x19b, 0x10001, 0xd32, 0x8, 0x5, 0x7, 0x5, 0x101, 0x8, 0x6, 0x8, 0x4, 0x7, 0x2, 0x73, 0x0, 0x1000, 0x40, 0x9, 0x6, 0x7, 0x1, 0x8e, 0x0, 0xffff, 0xffff, 0xfffffffffffffffc, 0x80000000, 0xfffffffffffff557, 0x12, 0x8, 0x3ff, 0x8255, 0x57b, 0x7, 0x9, 0x7, 0x8, 0x465, 0x8, 0x1, 0x4, 0x8, 0xff, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x7, 0x5, 0x1, 0x1000, 0x1, 0x6, 0x1, 0xffffffffffffffff, 0x401, 0x9, 0xfffffffffffff7ba, 0xbec, 0x1000, 0x42, 0xe637, 0x80000000, 0xffff, 0xee9, 0x0, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x3f, 0x9, 0x1f71, 0xfffffffffffffff9, 0x100, 0x80000001, 0x1, 0x6, 0x3, 0x9, 0x5, 0x10001, 0x9, 0x7, 0x800, 0x6, 0x1, 0x8001, 0x80000000, 0x5, 0x2, 0x7ff, 0x7, 0x0, 0x21], {0x77359400}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1731.174216] binder_release_work: 5 callbacks suppressed
[ 1731.174224] binder: undelivered TRANSACTION_ERROR: 29201
[ 1731.191925] binder: undelivered TRANSACTION_ERROR: 29201
08:39:38 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x101000, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x3, {{0x2, 0x4e22, @remote}}}, 0x88)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0)
write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={<r2=>0x0, 0xffff}, &(0x7f0000000400)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000440)={r2, 0x3}, 0x8)
ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000240)={0x2, 0x0, [{}, {}]})
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1)

08:39:38 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0x280, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c4ff0700", @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf2513000000500007000c0004000400000000000000080002000100000008000100ff0000000c0003000000000000000000080002000100000008000200ff7f00000c000400d30e0000000000000800020003000000140001001000010069623a6263736630000000004c00090008000200e398357108000100070000000800020002000000080002004000000008000100080000000800010005000000080002000200000008000200030000000800020006000000"], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x11)

[ 1731.306852] binder: 29589:29631 ioctl c018620b 0 returned -14
[ 1731.306937] binder: 29619:29630 ioctl c0306201 20000440 returned -14
[ 1731.554855] binder: undelivered TRANSACTION_ERROR: 29201
08:39:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7400000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:39 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1731.970940] binder: 29765:29842 ioctl c0306201 20000440 returned -14
08:39:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$PPPIOCSMRRU(r1, 0x4004743b, &(0x7f0000000000)=0xfff)

08:39:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x7a00000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1732.137620] binder: undelivered TRANSACTION_ERROR: 29201
[ 1732.339170] binder: 29850:29875 ioctl c0306201 20000440 returned -14
08:39:39 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x500}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xfdfdffff00000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:39 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1732.467127] binder: undelivered TRANSACTION_ERROR: 29201
[ 1732.472659] binder: undelivered TRANSACTION_ERROR: 29201
08:39:39 executing program 0:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xdf1)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
sendmsg(r1, &(0x7f0000000280)={&(0x7f0000000180)=@caif=@dgm={0x25, 0x800, 0x8}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="8ab57bf07113ec2f0d575153fcd067af217bbbe2e561fe6e1be35b8bde55b11c2aeae7ae2cb004234292330bb1765dddb834e2ffeb62c73a6b88630acd3a3bf15bb127ef1ff95df19a84970cc98d821b0cee1e08ee34607c34b3b4b1036ddb74feb3144b8ddb910d8dfb67090eaefe", 0x6f}, {&(0x7f0000000400)="17235560020898b86748299d339a59f0091d679a9576af08da5a8f6bf8ff9919532eda95b28d85b4c990a3fe3733b2aad345dcbb7f44a2f51b1734f1cb74ccdd3ac3ef9d3042e42b4ab2721b35efcdf8cb3d3992e7678e4cbe106be92ef921ff4635110105993578697b04e28a652a7c0786146895d63937d5a19982fa1b6e633d64cf331c3f937801ab5cda275f9211bd8bd52f72700a12aa7e374a634403f603de650806501db84d5c95c18be0cc90de97a79b68763620af4ea119f6e061ec1258ca602644d943eb8cb59ecb905bcb2e8ca6ae58ae5a68c940f8aa08cedcc836dc3243397590e18dd72879e824efe1ce", 0xf1}], 0x2, &(0x7f0000000500)=[{0x70, 0x11b, 0x0, "a6b634121c7e7232c2f2df726b82749804c6dfd326a336e1d338c2a95a4a33e57d8ac0de695fd783b47af41cb95b570687ef7b237ed1a808343eb43fb92249b17922b90b610749a1ec944bf10078712e39166d66f4500111d3632c7285"}, {0x48, 0x11, 0x61, "678d819d7ad57fbcd9d895923f2ec71a3fdae6b072bdfdbb8abcb386b06573a1ca9a00ff11393d6c6baf58c7f3b5c3a29aa016"}, {0x100, 0x13f, 0x3c69, "92646983fdbba9de6219add72c319353b1ae2b1fd77047cbd7fcf68271bab3c566be6294d2194c028214bea5bab72bf538faf3dd5bd55a7318d7d319938357b8a7ef1f7347cde2348aa78f2809a0aac4b44ae9c1e0bd412e7faa5c1c0f934455e2e51640c10466cea356d0493aa97a04b2429b600fbf44de05fce54ca6e50c6caab93b5af95c1ac143819fd567452490ddaf83fa065bbce542221a2d20fdc6c5af959c6e954408f5a3f9ef17f963455c6bce68fde8ba781c8ccaa520d42ef71e0cbb20be23320ec11ced95796e981008b22b45ccb47ce4cf7de4e8a66fa78fcf986f06f50769bde2cef1cb"}, {0x48, 0x102, 0x1, "99efec4d123104233fdf472b07c0a1b0b3921136ac8d8be3d6802283fd946903b9752425e345a41301a8391a68194402580e46e864"}, {0xc8, 0x19f, 0xac23, "cb686d63e86e80d8aa633a171c8986361daff66f90ff1b3eca4b3270f49a7e416b50b35ff8006d8fd098a13d7efba69d1f430b5b1a04eff384422160a506d707aa609b4aba788985d6b005b4286e1be99feef3b1eadbeaf1e9bd69c4c549140d7c30745ce0a9fb12914207c48ac6b3fbd7cc130ea15837e8680f7c64b0fd29253091719fdfbbf23ac6e615d90652b9b8fc751af841d8ad02ded648ed80f6878b2b30fdedd5e8bb990e37063157e8c949daf9774f96f4"}, {0x58, 0x10a, 0x1, "f9466d5219bf98ad4311408467b74e35cbe31a1f93d327620b9faf59b8153dc3311df84f0ad55502a1cf8b64eca1187eb7a323a946e77593347e5c8450df884e9f44c2ea32c7"}], 0x320}, 0x4000045)

[ 1732.541937] binder: 29955:29957 ioctl c018620b 0 returned -14
[ 1732.604149] binder_alloc_new_buf_locked: 6 callbacks suppressed
[ 1732.604160] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:39 executing program 5:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x406c00, 0x0)
statx(r0, 0x0, 0x4000, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1732.715484] binder_alloc_new_buf_locked: 6 callbacks suppressed
[ 1732.715499] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1732.746327] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1732.754812] binder_transaction: 6 callbacks suppressed
[ 1732.754829] binder: 29956:29959 transaction failed 29201/-28, size 0-8 line 3147
[ 1732.769680] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1732.779401] binder: 29955:29961 transaction failed 29201/-28, size 24-8 line 3147
[ 1732.844766] binder: 29956:29959 ioctl c0306201 20000440 returned -14
[ 1732.888450] binder: undelivered TRANSACTION_ERROR: 29201
08:39:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0xffffffff00000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:40 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
accept$unix(r0, &(0x7f0000000180)=@abs, &(0x7f0000000080)=0x6e)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:40 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$KVM_SET_DEBUGREGS(r1, 0x4080aea2, &(0x7f0000000000)={[0x2, 0x2, 0x6000, 0x4], 0x81, 0x42, 0x4})

[ 1733.428824] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:40 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x600}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1733.600143] binder: undelivered TRANSACTION_ERROR: 29201
08:39:40 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
sysfs$1(0x1, &(0x7f0000000040)='\x00')
r2 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x0, 0x100)
r3 = fcntl$getown(r0, 0x9)
stat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = getgid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000019c0)={<r6=>0x0}, &(0x7f0000001a00)=0xc)
r7 = getuid()
lstat(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001b00)={<r10=>0x0}, &(0x7f0000001b40)=0xc)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001b80)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001c80)=0xe8)
r12 = getegid()
sendmsg$unix(r2, &(0x7f0000001e00)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000000480)="1e94ddefd2f925c3e913046a861b87ee806fed7090e37eeb2435e7d46f2cbb14069c8dca831f6dce4345bdc9177c219a5359002b4a40bedb3a5035", 0x3b}, {&(0x7f00000004c0)="d15d1cac92a706315e6f0ad3f8119abb34634d1f07688da2baddf65c3a3e1814b044bc5a9ead4a5f7d1d02302c56c317a4fa42fba5befebfb603d9d3b1323164fe80189af0e3359de87f1f683f", 0x4d}, {&(0x7f0000000540)="43c244fb703d4348c81ae513345bea", 0xf}, {&(0x7f0000000580)="66b83da6687c0c51dda8f055129a38366c6dcabca71dfc8a1a57b0b36f21f90111ad4f6012d7e53d9bf66d2c547a77b8860ff4de8445c7b333e1bf7055fefe396c06b1a9f9a0133a3ba933768ff2ef113bbaab87db9675a994546445827c61d3b2963c477ec92bad4d7f683ca179", 0x6e}, {&(0x7f0000000600)="ba7f034e5c533fa9d3de90d70302196785a21632a43861a99470fcccfc812f2b1d0d07160289bf8df0d31e36e7008e6f7a7955a1802ef9f6c55f8d9aed794dc84ba9a665d9c62b97a8ae8e30f8ebf8cfcb00b361b628181d1d948b56a2526f31568c00b4a711f9f8", 0x68}, {&(0x7f0000000680)="49168e9096a9726efe68ffae99f7893b0dc60bea9a96f6453df4c9743b27ad39cffa7366f03df570b670ed7f168269c3dc2e35da117dc4e8a75ec61739f3e58c8f5d51627c1a4eb59eafc9914b12062d52f7538abb701ea9996ec932039b2f76b440a06a36db75dc12ede95470d679f75b9507fb8bd56624626c410ce67ec609", 0x80}, {&(0x7f0000000700)="63dd955203617318c570dd8323e282e92f12fc1f624c46cd38b50316e982cb023e7d552b29af99187b87d03781c268f0d187c3ab0011b0c44653e1bffca48424eccabc2ff035088d5ea4c549d4658e8be59bc8cb7ae0d58b8d019ea1b9372a2898e1a63a7c9f8b9db03f9b1235aab8e76c68bc3c9196dfa14d4e05f204b811b6590bbe2110202176543eb65028fc6bb1e1e997d5bcaebd433afecfa3ce89de2428972d3efc779b63d348333848f5045dc085", 0xb2}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="2c261733cec35ad8813e772814ce4c110209063f224e5813f33d916021fb687859c4ef75e78405f3146d99e5a1b6d9e365605935f9e6d639661fed7060c3f3de02185f925d6221af9b075434212f7fa396a54438b56f8d07fbc08da01c38dc69d1a2f0033c37192c8b0b80ddcb765a99d70fa4ac5f32b8f464", 0x79}], 0x9, &(0x7f0000001cc0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r9, r0, r0, r0, r0, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r1, r1, r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}], 0x128, 0x10}, 0x4000001)
prctl$PR_SET_DUMPABLE(0x4, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001f80)={r2})
r13 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
r14 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000001e40)={{{@in6=@local, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000001f40)=0xe8)
sendmsg$SEG6_CMD_SET_TUNSRC(r13, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r14, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x371}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

08:39:41 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={<r1=>0x0, 0x1}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @local}}, 0x4, 0x1000}, &(0x7f0000000280)=0x90)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r4 = geteuid()
r5 = getegid()
fstat(r2, &(0x7f00000004c0))
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000400)={0xa0, 0x2ba005f6f4e972c8, 0x6, {{0x3, 0x1, 0xffffffff, 0x4, 0xfffffffffffffff7, 0x6c7a, {0x6, 0xe8f, 0x800, 0x4, 0x6, 0x7, 0x3, 0x80000001, 0x100000000, 0x0, 0x9, r4, r5, 0x8000, 0x80000001}}, {0x0, 0x2}}}, 0xa0)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1733.668050] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1733.796855] binder: 30117:30162 transaction failed 29201/-28, size 0-8 line 3147
[ 1733.812547] binder: 30179:30186 ioctl c018620b 0 returned -14
[ 1733.876824] binder: 30117:30162 ioctl c0306201 20000440 returned -14
[ 1733.933796] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:39:41 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x88100, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1734.014901] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x2, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1734.067277] binder: undelivered TRANSACTION_ERROR: 29201
08:39:41 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200100)
fcntl$setstatus(r0, 0x4, 0x400)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e21, 0x8001, @mcast2, 0x4}, {0xa, 0x4e23, 0xfff, @local, 0xf0a}, 0x200, [0x7, 0x44, 0x1, 0x2, 0x0, 0x5, 0x1000, 0x1d]}, 0x5c)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1734.113040] binder: 30179:30346 transaction failed 29201/-28, size 24-8 line 3147
[ 1734.266622] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:41 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x200000000000e440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1734.347066] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1734.356121] binder: 30493:30501 transaction failed 29201/-28, size 0-8 line 3147
08:39:41 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000000)=0x1)

08:39:41 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x658a6846, 0x200)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x3, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:42 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x700}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1734.695462] binder: undelivered TRANSACTION_ERROR: 29201
08:39:42 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
socket$inet(0x2, 0x3, 0x8)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x48, 0x15, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@nested={0x0, 0x0, [@typed={0x300, 0x0, @fd}]}]}, 0x24c}}, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:42 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x20201, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xf, {0xffff, 0x5, 0xed0, 0x100}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1734.979824] binder: 30744:30778 ioctl c018620b 0 returned -14
[ 1734.992916] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1735.006993] vivid-001: =================  START STATUS  =================
08:39:42 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0xc0000)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x82bd})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:42 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x106, 0xa}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000340)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r1, 0x2}}, 0x18)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x101140, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
epoll_pwait(r0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xff, &(0x7f0000000440)={0x1}, 0x8)
prctl$PR_SET_SECUREBITS(0x1c, 0x5)
r3 = dup(r2)
shutdown(r3, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x4c80, 0xfffffffffffffffe)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x40001, 0x140)

[ 1735.033454] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1735.064494] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1735.072870] binder: 30747:30772 transaction failed 29201/-28, size 0-8 line 3147
[ 1735.168034] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1735.177129] binder: 30744:30778 transaction failed 29201/-28, size 24-8 line 3147
[ 1735.177736] vivid-001: RDS Tx I/O Mode: Controls
[ 1735.504926] vivid-001: RDS Program ID: 32904
08:39:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1735.796466] vivid-001: RDS Program Type: 3
[ 1735.800751] vivid-001: RDS PS Name: VIVID-TX
[ 1735.805165] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[ 1735.846429] net_ratelimit: 26 callbacks suppressed
[ 1735.846437] protocol 88fb is buggy, dev hsr_slave_0
[ 1735.846457] protocol 88fb is buggy, dev hsr_slave_1
[ 1735.851420] protocol 88fb is buggy, dev hsr_slave_1
[ 1735.866824] protocol 88fb is buggy, dev hsr_slave_0
[ 1735.871878] protocol 88fb is buggy, dev hsr_slave_1
[ 1735.877029] protocol 88fb is buggy, dev hsr_slave_0
[ 1735.882171] protocol 88fb is buggy, dev hsr_slave_1
08:39:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xa00}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:43 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000049c0)={@broadcast, @broadcast, <r1=>0x0}, &(0x7f0000004a00)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000004a40)={@mcast2, 0xa, r1})
r2 = gettid()
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
sendto$packet(r0, &(0x7f0000000400)="464331f8db0623b83414c322291c52b55098d852caa6c2572b19176352e32b8b62fd12a1108898962821cc3e6f2f712310d309c9bdb3cabe8de17502ed063cb2ceb9f6344a79fa35c2e489061b72d698db509dd51cb4a0678800b5e7fc9462a6e1070f0b688704252e85c0614c9fd945bf097afa7352c799108ba5c58c093535c262a5869720d6fb94849f31fdf8b4fcd393903493d65226abc99c7938be7989c54d91769168e491722d675600691d1f72098a86ad5fdf8a4464c06b9b2e068fa8731c1e1b47bb86c4e1bf2e334e9381d2ac186be0fcf1db9a38a2db8224e36fc654a1b15ebae9e4a9ac8649f21338e5b90b6923ea7d4e0d9e", 0xf9, 0x4010, &(0x7f0000000080)={0x11, 0x17, r1, 0x1, 0x3, 0x6, @dev={[], 0x25}}, 0x14)
r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000180)={0xffff, 0x7, 0x0, {0x3, @pix={0x100000000, 0x100000000, 0x47504a50, 0x6, 0x0, 0xbc, 0xa, 0x1000, 0x1, 0x0, 0x1, 0x6}}})

[ 1735.957133] vivid-001: RDS Stereo: true
[ 1735.980145] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1736.023421] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1736.033152] binder: 30969:31037 transaction failed 29201/-28, size 0-8 line 3147
[ 1736.043334] vivid-001: RDS Artificial Head: false
[ 1736.048989] vivid-001: RDS Compressed: false
[ 1736.053964] vivid-001: RDS Dynamic PTY: false
[ 1736.072279] vivid-001: RDS Traffic Announcement: false
[ 1736.099414] vivid-001: RDS Traffic Program: true
[ 1736.105089] vivid-001: RDS Music: true
[ 1736.137287] binder: 31074:31098 ioctl c018620b 0 returned -14
08:39:43 executing program 1:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x48000, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000180)=""/31)
r2 = syz_open_procfs(r0, &(0x7f00000000c0)='fd/4\x00')
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="80f317d0fb5bfd436957c27e6111ea98fa0a50ec8cbd2ed3a001fe2915e64e3ab94c2944998310cff02e26df3d323d44db453bc599d0e1ac88453cb516c15169505f566fb9e0fcc440b9f9ea4d8ba2aa1b5cefe1564448f0", 0x58}, {&(0x7f0000000280)="566cc49a959fd26267a8efe24853ca701038744f07856467e534849bdf7de3", 0x1f}], 0x2, &(0x7f0000000340)=[@iv={0xe8, 0x117, 0x2, 0xd4, "dbec66757377942f890f75a4ce7495c4b889065e1fd1b16c52466c3190c65baab11f78238328c4b067f1a58a33193c7383a624f6abbaee0819d2f4036eaec0435f0d238374b2f4baa1e5995a20ba75cacf7d6381e73e67c4fc4e78a5af0bcca06ece73c2897e2dff60930b2fc6ef5abb7af8ea946b8bf4249b9f8129162fad2ccaa215586c405dd6b9ade9467e1c26a92c9f0a8ab034a91c2d7d7a3f2183134bff3cd6ad7679ba24711e78f4a36e1da51c96b6860e465441be955f3a51b3798d26cd29e60da01278dcb512b122416d4df2fbcfb7"}, @op={0x18, 0x117, 0x3, 0x1}], 0x100, 0x5}, 0x80)
r4 = dup(r3)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c80, 0xfffffffffffffffe)
setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000001c0)='vboxnet1&\x00', 0xa)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x4, 0x0, [{0xc0000000, 0x10001, 0x5, 0xfff, 0x3}, {0xc0000000, 0x401, 0x9, 0x1, 0x1}, {0x80000007, 0x7f, 0x0, 0x4, 0x9}, {0x1, 0x5, 0x2, 0x1, 0xf910}]})
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000100))
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x404000, 0x0)

08:39:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x5, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1736.180993] vivid-001: ==================  END STATUS  ==================
[ 1736.192200] binder_release_work: 3 callbacks suppressed
[ 1736.192208] binder: undelivered TRANSACTION_ERROR: 29201
[ 1736.246496] protocol 88fb is buggy, dev hsr_slave_0
[ 1736.251605] protocol 88fb is buggy, dev hsr_slave_1
[ 1736.256795] protocol 88fb is buggy, dev hsr_slave_0
[ 1736.262884] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1736.280500] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1736.296685] binder: 31074:31244 transaction failed 29201/-28, size 24-8 line 3147
08:39:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x800)
timer_create(0x1, &(0x7f0000000240)={0x0, 0xf, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000280)=<r3=>0x0)
timer_gettime(r3, &(0x7f00000002c0))
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000200)=0x29ff)
r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
fcntl$setsig(r0, 0xa, 0xb)
r5 = socket$kcm(0x2, 0x800000000000003, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0)
close(r6)
socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
recvmsg$kcm(r5, &(0x7f000000f640)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000080)=@nl=@unspec={0x0, 0x0, 0x1befff7f}, 0x80, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8907, 0x70a000)
accept$unix(r2, &(0x7f0000000180), &(0x7f0000000080)=0x6e)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
pread64(r1, &(0x7f0000000400)=""/90, 0x5a, 0x0)

[ 1736.450524] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:43 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)

[ 1736.505935] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1736.515834] binder: 31348:31403 transaction failed 29201/-28, size 0-8 line 3147
08:39:43 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$vcsa(&(0x7f0000009540)='/dev/vcsa#\x00', 0x3, 0x80)
setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000009a80)=0x9, 0x4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x4, 0xfffffffffffffffe)
setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xfffffffffffffde8)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80800, 0x0)
sendmmsg$nfc_llcp(r2, &(0x7f000000a2c0)=[{&(0x7f0000000180)={0x27, 0x0, 0x2, 0x1, 0x3, 0x400, "e0a9b39273c5222720f7a70cbd7b3bd6d201b4ad470bdc2b64f907d677456592df214ec75ea07355e1cb5ed8c0803694ebc6c58c759a64d7a5c70cbd256dc0", 0x29}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000200)="6a89eb9f78e0d4ecb825f2f567ede4f2c3afa02c1c9a1c692ec74d27cdc89f041a4bc221f5455352769f5a7eae1f6dfd03784e2fee9ae113ec0f90dcb5c0ce28f0d5de7477", 0x45}, {&(0x7f0000000080)="9f1eac9f33f8ec01e52bfc3a5158410fa79846e199aacbd3879cd28d9031aead171bf4a45ac0f4c9011626d9e34f08", 0x2f}], 0x2, &(0x7f0000000400)={0xb8, 0x117, 0x9, "0ace6bc433f63e4fc2ba4ed7ae2cc58a34926f7659b0f2c8fae931eed8b78d835690497cc5d43d772fd0cfb5e34ecfd075ff8e36afb2cd9d1947cffd78c5f1c1a03cabc893439522404c4ba652b1a1776f77df46a92256b05367183ac4f01fce00f2b375893786888914784cffc635985490c5a0bcd30848084279bc72dec3529dad1c8d2ce93e6a1316d6bfad8ea3b63aa9b2858af54592a8a867ff0df4e8ef90d0d491a943"}, 0xb8, 0x4000}, {&(0x7f00000004c0)={0x27, 0x0, 0x2, 0x7, 0x3, 0x54, "1077ee2deb02893e868d306461f53bf80c6c045ea14bfa01610dd86f6465e8adc405a113a4ac8e227c8b493745e169d33f2060145bc483226856d3872efebf", 0x25}, 0x60, &(0x7f0000002800)=[{&(0x7f0000000540)="fa3e86f673622250097b0952d6d3bd5495ab0d9c1ca4b84137b16bfc42a7be17e136b35ee0dc4716daab07ae35c2b6acd76ba40ed7fa823804516512c06bb0cf50006f8428eccfd9f36f3f465b33505a05ef983d5b12607b5befafbb05a62cb5c2bb68b2289876de08c588e92d2f41a1201e3c16edfeb435410531a3fc513f8f524e105e62ba23943be86576b7ee57f9916620aa8caf7fde457286c810df9732311c99c9691cd72b58c97610feca79293fce2329865e05e27e9f062aed973f00214ea8827ba301fb16670dc0ef41637982985146e7ffa7ad9820f9bdb529c8af35a637036903", 0xe6}, {&(0x7f00000002c0)="9758f8fe05c2d709f857b2de6c4b8e504eaf3dd87032f8338848fc27af75ceb54a85e103bc95", 0x26}, {&(0x7f0000000640)="3772f8598e1e8a5ad44b627d6b03362f55d870a3408acec8e21aaa5ac2b3bb3cf6a827e1f26eefbdfa10eaecdfdc", 0x2e}, {&(0x7f0000000680)="184760cac0f41ff870e02c30e4c58e50323f76c37d06b9fa73d8cba9aa0bf8b892268d003832e872054b4e23f28aff339782f84e592dd895fee9bb65f053eebb565ebdfc2cfa32c7d2e0a81ad2d3e87051abae617645dc5fd4ee9734011ce7177311a5ea44cf644187bac454206ab7a522dde269d7f18e62caa0c36a36fd47172b6bff1a78c141f2a3d709256be95fb9bb995263af8aba1d486aa1c7ed6ec72bf9ef4ffeb4a1810f898e89ba71f21d44f602d4db8c684bcf5de4b2a92c238cb7a9fa9b7d2a1d8048dd312f67eadc32bf8074372764fba14d0f1f8949c623e723726a04c6927d2ca6cf4cc48b44739a943e8534a9e19e7374713c27e50cea001d5f7b660252834b827e335342b26498f8b2b837a19d530cf316e7f3122a234c84c39561c6ccf9100cd04695203f551895d436dfce37ea9ee5b5ac0a6505283d5d1373ca0f28043586cbc19f673d5bf7fd9351e0f6017e5f45873d91786ad2426c993d7b8755e68422bb073ff13af1b4257285722145337e1f462ee77916dcd269ceba54c0729c7a778ff9e1658b543a5e052a20345b7ef3e5eff5179877b9fabe1c76bce79e97ef30d536c29b59548e72b8a86e2d4327284a206825bbeb8e8be7ae13d9003355de5ccd275edce8fb47b53d07007efbca23ab35757030883984b43b2376333ecb09613c508302cc5e742d0b7212b25fb376ea5bf81473c1eaab9dfe427ebbd079f66b7376fefeee0541b3fcccc7f452a033885aee654c763aac9420622e0557e8d9edf6d27db298585abf7c1d23805127ce5b6e4eb199566eabf00578766a9dffccb88f0f6fbd21411fe685f46539fee5ff4571b7a07cd1374e0f44f41ba1ea2177d025b36d753ef92275ac0f01f88e0ee0f8fb86b1e9fc33a9474b0085ab542da6846a9551d904160f69ecc608aeee4a3278604a5fd1b87a1090bcc2274d2f8e45c5c5970fe96b5f2a4c69cad8332d7af7c41f6c6bc3b8416b02845d92b2fda768af04e4bd4626a333aec5907db1f1c2b7a9fc919294da2f1272213d2278403dbcc7823f9adb1ae8f2404d8e8625bdf8e851ccde18717194896d1c5a70c654e0c30078e4b28666de2fa1a0d31d0a231b485350251f2a227bbcebae974af212d2e911b98a554f28a8fa2d0958899200f835e80d801c43d5807ccc2981e3b6fe7dce9da733d9f50cf003e9763a21580810733df4b6f47ca8225e7e61ecf6b8bd49677d78c5fa52e1693000c87c95b8f5f7158db819c598988a7ee60a0dd6cef29e1ab13e91a7f03f15c87e7e2acebd95f2135b3174fb5602427423ddb7d531b323d1fd3a00b29c2db077a4e29db829cb8ed4cc02560f7abcaeccc38ae4522d19b19db2cb5e5ea6b46d66de87f67fd8e67bc7afdeec5dd322f80c01691951ef4d6c3946a3def61ee9148d189d41727df73322abbc9ad7129415a60fb70a7524bdad29be888e7a71c5000641168b88b3ee7c2be3699da09e14f2c6ddb579d351600277157bae0208266931f9f2af1645bc357d1e872abadd89ad5c3551808bc75d095a72399083e8a149ae883e3c34426a74672996bca79be0b88e012cf4f5f1d2ff7be7b4f2b5e381ead65a4b29e14858f0d1c26bdd11708d8efe5062f681eca1cfe40c6035cb5ef1f249fb032d8e27f6c1f98800ef2afd5eea05cef7f5946bbc62aaa36ba1321c982128f91743f0d416b26943b4da7d83d47cc0bc98fd3ea34a435ef98070cb4d73df2378d28bdde03bfaa998397d485bd95eb5b1de0da1d3068c0031442fc562ea3262f8c872c83f3980e59a9102b0af98f9a54adac48ea10c3cf8e743cc834372be6110d98f3da29fb471482bf35133b231028a9fa93e855b562c2fc726e4c64147a08b6e322ac51318ab74a70d42dc3739dc52371428568278fd005e2205d5c67ceeaac3d8a649c0465b26515201f57c2bb7cae2af0388232d75df0e48430d790f592ed549ff180d1b53cc0cd41dd75e3ed584f2951bf31b41018b4dc12d3a1887bb07a9ec8881e5d7b8f28c7c78a0de6dbf737ce6e48ca4c45ea1bcdae537ed61d47b08184e9d7b30a09e59601eda3ef6a08ae50efbad1d7e30e108af2c5eed057c88382eb6339a60d01613460864d7f1c52d86a95ad07e55ace829e06d8870a1dc33dcacca37c519e831a63f86c7a45f553fb09da37b630a7d1f9b439fdd5f0f9e87e793ed5a30e009fa3e524640f23e82ebf52bbd57543c663da7899906a1180f89811f81240123060a1b25fa06be4e4809a5bf2178324d5e4e529d2c2bf1c5517993a9921f89a424b99a36349aea6c8ba6b439fd63f7e904e3b4ccc4c7f5836dce566b63f1054e10df7daee7570040ed0fa8a99b601a8531ce7a0fdc43409037c83409dbd728996089b5089fb6e775bc0d8834b4e68b3f49f282106519ea8cf6feafb1284e010bedf45e6375c5ef7c630070fd0a209cf71754910f43a0c51451ebb3c656549eef419cbf191fbaecec55df7fb91b57037f6c304cdea4fa5621ecc85b15d0519178deacd854ddcb72766fd328711887996fbc53d3d95b1fe9cc596d83a072ba2ecc4e32f919c7745920cc36842537379d8fda8a6b09a0ba1f16b75577d30bf852fed4a0baf0e4726456caed9723f287b101544a3ae187e5392147107c6dfe5bf917e7f051034cc425960f2c3d214b9f5b828c67861e7aa6594b7d6436f2db9c1769322fd7050076f8f70e0d7794f0bf48317ed8056175299fa1cb5b41d36fae78c6f9d8dcbdec147d1de26fdd5c5f5d502599bfabbadd6533d61f80e52e7e742ce6659b448305e245a157d8adb2394c7b76ebfc3da170efd549aa384a7016183befc32428aee6a2de9a994481ceba7296a07a8e5dec533741a8f4fecc073b002ebb71f9adc47e8267169569af40a17415f0199a86bd8ccb2d47f178ec760e94b7390e16b4f1b49a1689563e7b7f4e8f395fad56e12677b579d6a804653b59d1986da6edd0736e77ace4433efed2a38a4efee6fe80287855144189a69a615ab7a19933fb89c1a92b448f61f7ae1fe9626677368334f1e1acd3c31df7bf2a7b7b80657dcabacd5e6ce5db367290f34a30d87ea6dab9710ca18f07818f2cf9b9f2e24e3c9afe00683477e7aa701b634ba1fbd7154c7508e9ddd9ce967519707be90274df34f5df55c7d2be7cd4bae391755d31c91968084afb65b26fad4411a43e9a8c5568ab25f9712fc35852e2e5d0319d6cbe3e3405f227321563cd4d5ca5e20bf7293096fca33badfeb57c3380eec63f78adf40a13de680e5e14441ad88ea28003e578fdfb837c4790486176f797aa8ccf8da025f89179ae67750905d2d3ed7f7afb6d7001e064a1cfb627be80925d50049ef2cc746dc49998ad9f53ce2335022cabbe525ef3ebcb8415b217b3e8f3275ded07d4e5e092f89dfce49720d9172eb4aa309cfb653acc9ffaa21df662190a5aefe8d45a877d829d30ae459beb9c2ead1f61ca9ee370f75af518b21e806af33798777b85e5a255bef826de1abf45b8e3c7674fc2cc0e73e9fbd3976410d66b8fdc66526f85ae134f22b3c7957fa9de9061a11f687f43f274c0e74135d0ec7018645bca204e9812fa1f9a25519448f897449afb20196f4415854029adbaf508a4b6d4eb7462d612cd7f9baab2f41bada514f1770ff5230a6537c2f754240a196cff23196eea58c5f1c993d28d0fd29a50f4b64e0b9b6f1448abf6d7bf446a8dfa08595ac339220d96ce822ff981c118c2fd4cb64bf7d5da2e025ddff54338251cc7317cdf292133bdfc01292647a02c3673a2f8887ff61b4edc7864e6b01277dc0b8b5714b1de1175a460dd77c8fa86b048bf5c42d23362c6db2f80e926399b15ac9f8943f3f8b18100907a0dd622042732223824b12a31b7b5a746c77c25bcef67fb58316fa0d291e1bafe13df903be8599633b1db6a894ac2b2a611c65828856a1b122b090f4a7404ece0fa27b23bacb2625c3254c67fbc6b3afe71f28f1f0de4baa2e5fdf33eda8a9eb1a497bc6ae8d9abb3403b34958ea1397e3c27524d76be7cfac20b5bd67a137bd39b92be966ed5aa4812df191c1e44ac78a2bead3f588e28bb4133cd857716f9527da24f61b72a9f56feffe620c21202021dc0c139c5b6075f94b40533ef731d356e97c33c0b94c42dff5b71b27b1f72f9c0d0d370b9d6999a8a022e5e9058e24a38d32f8d73497b8d377952aec79c62e170d419ff25a21534c9076bcc0f662ffda31e286646d3fefe7d2ebf7cc63318436300fd7ff22e070819b7a9c82e9b4dc820dfabda661f03f7be6c3b40cd34feb1612ceaeb2bd12ef1ba2e5e08baf8084e92aef40647e735b9f69c0069408db70b61651be9d4232ee842d4aa8478e34954bdb6ab73e774347d6ff370dc39ae2202c17b034b464e2c1a39ef4f84b74269cefee506e2ae18dee47a05fdd0966154b0a48803d7fbca9fcb97aaf1143bb869fd0cebb74584f28a48d4b178e30bb83fa60c72abf4188b1613b9d411b39f5ebdb4f7396d664db72e1754b8be6b6ab16a715978b0303c2ead32175821637b0ef1ff09936b23647025a535fa16770a8630a28fa2612a96cca43fc65a86e97c4acc5c6231ecdcfd7159602b9fe29acf6c452441dc44442d7850de279f617c78c85d3e8a042c33f3942790880fd3f8a4a6003478325687e5f27618a89d7db1e52d11757a5cb39b34ea2d70c3ee9124e3ea78f174cc4a09b2e77178adee4d816ad007c4e18369421cf65c53996c06613a1f2a10d1e3729adae3cd65ec10c602bef4ad36e251b7eca5dd82ddf6a47899466ae87b95560e8c4dca2a09ed895072d482414fd856c3af8a5e26d21f5d2aae7f76b6dbf09c0bc4293e956f45c7f0536da96ae43ec9dd94cec33f564fed6aa055d8dcf9dc4986e425cab2f122b08e387ee6850604180e1f05e677c01231753fa7288793beb7d2c3b28d2b66d803808e8d03d9ad45df0418553523a23eac7a49fb7e4dea1c246bb29205d0ed1431d3d10deca2b3bc04184fd8f2a550399951dd9bebc21d0f5e75e6098d2eb192b76d635187f13807a8c0c9d1617fae91fb4b454e470f8249935bd83d491ef7782fbaa18b13e81b109d3290ddb1e5efa66d6a14b583136bc4df025b7024ff750a433434fd88e84af07cbdd8badeda8bd128509436bca60e62cc3de2bdd3ce3d0c55ac33914fb97b29895c5574828320a5eef390ff8b8ea2b5f34097d3b94668a6cae2a392c8cb74919b10f2395ebc0563b6a4290190ac2b5f411424e3fade79459e7122e2bfa7dadee32c34fc03ae2cf620802499d396298e07f00aeaa4b20f6a0445b0f81125947f75fc56b63dd5ff1850e68b47cdaae520f0d41ca36b49dc774f601aa7b8334423898bb969c11c25a5d39c3e83785efc2c6c34547e8624bca85afccdeb8cebccb17a82d9562e3263aba92e77ea812981da68d3569675a0450817e4c88f1aa372b4366f584a97a949965ac9890ed03729f755e15f082e8f0d8e08e9e3dd12c19e70f113f6ef98b58784dd3cd9dbfdbc617d4604a3ca30f682284fd935c24832206a166771cdea44922b9d7a901e09402e4774930f3de5fb310ef36f5e61074f70261e355d8e2f0ce0d5ac2b1dc3bcd99d570336ebd506c3a8152ab9621eaec68e7d172dba0165d7d51ebe38b88ccb3a3c31ed6f7aff260d9cb6479254a7db236e8051b77a681177d16c95b2c527afec16308a3a26954cad1bc708a45434b1b1e8affe85a2e0e3c299cae1efb6f283b20f8ea96eb0831bb23fd6340b1b24097e62143a8c3a3bf64637ee1d9aa4f57220", 0x1000}, {&(0x7f0000001680)="3e356681950b662c37bc7bc42f6e60df80288bba17def28360df46dd04bf961fe8025d1a85be7b6a2cd776b084f32d10a5ba51ad7ec8a6e0e585cfa030d0fce5d81d831d49483ff2418d60cd35c3093d10d60449df887d7394277dd1ca7cb4c5efa5baebe1bdc1e63e05a3062551cb790471c022d5a29e790825e17472144f2979a681", 0x83}, {&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="2e30f79c30be5de0b95b5e338b6aab6a2a4e3280e10e551f746d380bf425de8df350e4914d46994569a2e7196d6951fedb390b05d86d7d1f0bdfad66d68400c00b3522b29feb9828732ec492b1a674b13c2af17f4199f5065ebff15938b866984e9b6efa06ee7aa04fb19bc1e1f4a0db5db18d093713331e40a75e79257c8fa4630cc48719347ad7ff68c6fd14991ab1a63fc3c6145b1e53c7e68051749fa0a24621f020108229a317c61fdffcf9077f56215573c23d1418cb", 0xb9}], 0x7, &(0x7f0000002880)={0x10, 0x102}, 0x10, 0x8000}, {&(0x7f00000028c0)={0x27, 0x1, 0x2, 0x7, 0x1, 0x0, "faec42438db4c794da183362f4310f31f89d8491dca4620794bd9a4a1f44fccd03c9cb38966362968669f45cd63349bd2ffa5ca97107eac2588bd742104f10", 0x23}, 0x60, &(0x7f0000003d80)=[{&(0x7f0000002940)="617f073247254c7accb933602d477aafd0c87e674388806f996c45225bd522acdb180d49cd6f1bd6520baace301bcc9fd700fab140b1b2c6952c61614695f5345b08e5fb96296f253254a7a1e5263c115b8fecf5d6524eb91aa391bf9777972e70f4a8307a06014474734bab11e63c692bd7b1411b9ea8073f63127f6374cf7ff84cd5a4483707a2623fea622ba2", 0x8e}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="7e397285840425b67bbfe40f4ce503d4fa8bcaec9d3876eb5ae6acd689f2ff0b62af5bec6be63261c903a78779857f4333ff43b4b451f6c690eceaa3ebb63389a5d448dd9b5ea3205c910eb627ee9b40a5ee2a5cee01f4ecf5a7e34a8e20fff83e7c3cc3f8be02253a895a3efff05208fd31d1f47d40960472b618b05c26ec787137a7bb808ca2aeef7018d5", 0x8c}, {&(0x7f0000003ac0)="04e35cc13ccbcbf5951b29f59e6d3d9f70f2c9fc8ac9e99e1037b496bd2375a0d3755d67d4227f29f7afba56c49ef4c66f972641560888ac57a0c4fa2f751ffe486c040b2eb036982d002793d9d65e3484d323b46a0d0f391108a71192d72d47554364fd0b1b0efba94dce08e11604", 0x6f}, {&(0x7f0000003b40)="a79f69a6668e0b12ad38a700c8dcfa6e896650f4826f66c9238fade2d3ab3da1ed30ee46a59a23c8589b633be9dc8b46d3dd7fbd52ec11c4f20a8b6700683214b3f9820eb7a893ba0fd0dd339bab5e33201bbaa0dbd2416fb1202d8f62d3ed519606b5b3f25d2108a477bf76944edc9e2668ad3798de67e779e8b862794275d166350eab2cab140b8b7ca0e95de330881883616b0c786ccad265a9c1eec0b51fd4dd22a4157c57af15b3d63cb5726664bbb23fe1f6743acc762d22f4f2bd8abb8fb8867f7ab3f21d1b0e1ce6b15d", 0xce}, {&(0x7f0000003c40)="92c5602711a31f2759056bd478a18ba0fcc7f52cfac60deac3679af04e24800735003a182bcd0b80e131e7e50f104f554265ed5ca80560664ad47a9f61dd24f1087cfdab97fae11616f0ad86e2f4dbf5d776a06de24ac0a0f4a2e50e01170f6eceafb9f9bd1ed2ec2f70b60cc7bd89b4a6e7666ad16a13a9fd32d049778887ac94001e2ff1179f38269fa8ae282998a6a59fbfc6924d0053c06c139336cd791b83a3ee29ddb708b57a01b275a0b08bfa12d3936af9a76b8e00623de1bd7575141aea5fa2f33b01f62f68561ce78805d1f5", 0xd1}, {&(0x7f0000003d40)="2dd4fdd8888c985d2e65a34a30cb23", 0xf}], 0x7, &(0x7f0000003e00)={0xc0, 0x107, 0x6871f736, "fde31caec427b42c1346fabbbb8c8335c6167f26a835cb6b43d229ce2bd98c135103d5001338fcb3c4dbd85bfd4cdcc892eac115f0028930a43a6140ed7d92ffe9d9296381a13d05a687b8856eb62a65e4175357c0b72ae9c8400ef80465471005a90337bfdc458b0faccf4ff8e62387ad389be3715479cb011992d43ac4d8dcbff20ac5c6e37e079dfd620a2186bfc1f661141f381b8b13369767452f26153a67ac3a04c4d8e0266784"}, 0xc0, 0x4000000}, {&(0x7f0000003ec0)={0x27, 0x0, 0x0, 0x7, 0x8, 0x3, "00e6836879d0267f7bbe99761a6862a514d2296e9728a20835ae4bd2d36204017b1ba8208b95fa92509c861d0518ef6c4a80fba9ffe4be81ba0a177652d6d6", 0x3c}, 0x60, &(0x7f0000006040)=[{&(0x7f0000003f40)="e017a655bccb21f19a2f61712b8ab125d6b5c82603b2e6af3bf820c96f9fd278e2bda28490f830da6f81dd0f42712ba3d9c5e617a0c5fca0bc73f55e14f6d9afc331f764127314263caadf97097172cfd4119a253540ca962aa838164d235f19e1b060874d5aeff4ad18b4a7ffa8ce35bc14bb4f3d12db70c413f4ebbf1545a81466ecac0db16064ebad1d9e67758583f005b297758c3738a313e6ffa71c1adbc88ead4a78838c8a75970805", 0xac}, {&(0x7f0000004000)="6532e6b141d6e1468a59c4c206a71f923f13cfc3b14c899b2950e03af8ea8e6897a8eab1da2d9b7ebd6fb5579320d4e671717b112c2a13c14ec04a5c8ce051f0468a18ab263ac49c7f4dee0e9b39c2c09177054c76f5a346ea1ee1203c83b691280f1ef964cb31e03bdbfad155ad2c80e18e2dd1b0af0883dccdfb074d9e6c785a057a1bd1e9344260a6931ade8141038be5d10094c783667b4aba56110dd81e8edcd678f220ce00975b03c05ebeb2a73e3a17e4c4f4611956aa7cac0d16605b5bcca68c39e34ba7ccbc3f0376bdf0ab5766614e1d8f2b8f6e70aeed1e4e41b683aebbeda4327c688ac9cfc471f6282db06cb846c19079f17f49a8bce93766f85f66d83b7c997069b01122cfa3e8eb42763033ff441611a51f6618b6cccc6e031046b1cd25bc6e105beb47424f1722aaf3abdf8219205dc294f8d7629198e5acc697d9ffb9c3dd11b8e9e37a88e950e1f1eacad87dfef56da64896765c424a65d94862944c5d790bc0ba44619cfb1d2cab9072c30d37f4a078637d030603f8fe5444922f4dcb58290f72c78e58ea248a7d72f5e66651e5dd42456414d4e998b85662bb1618e09fceb4318d97a1143585fea5832c34bd42bf9ac7bd74ebe96fd87df3033ee877db10554eca461bade9d93d196e2a1d311326164d9a4e45e7e894841d4c78efe38bcb4ce1650c011528f07ab4a620001846a2a434a867cee269f701c107de7c025a101c2881be0a0c967fda10c75f89d6896516c9c6cacf4bb720ff8bec823c56f2816a335b0376e212171876335ddad61cd2fb0809e6a9c49da59bf95d76f7a5589565a7ded609aeb2c075554423783d5067864ff1e8f476e6b613d89b0cae5e4580c66b0a9d1d7cd48979a90b14e1d6f8a35ca0f53c4b2b63b4d596424cf1a9b6b10f2dbb1123dbe96970cf55be5a608ca7ea5ace546ea9db6b14961e1b202aee642b3154004e96a92a305bae320cbb2789ed9652ca1a58a65d941c9ee7f7659e7d9b9598122118695167abc5b3eef0fab8de515618e4882544dfb8344014517474cca96879d087eb7479561ee1407249071607387719da33b6cd512c9841cf18defea7f506258089a73219a5cbd3dd1cb1ba98d48fd56b68f14c819d0043d47e562256cc3c87c0f60e8760d9091168e660f118207a52b89995c5d364d890573fa79bcacc7adcd2f14d1253401f077197d7de0e64c80d70a712264d90c0bde8a60079a91f95d1dfb95ce746d7df23bf0365e6df21d7698c7fe5d02a7631d14fe7548ea4e244546ed6575fb4185b6c4f6c4aaae6904ca90887b00149ce0f8238724590cdd4573dbf8acd55df6e9c19169894adc2a7b04298fc837393f0fb9086c7e74331f8eec6388552ee06e0ac1fec0516e119989f161916bd95f9da127e461a0a2aa6dfae030912a3b7d49f9a91fa2fb7ba31be3c62684042d6356d36c2df41fe39a49ed98c4e5f325b507e6056838fb3a5bb1ce1ef9559079a35588e42afee71ff85def03cbe44a60abbacba3256fa95a3bca5122470557b2cd3d9c9ec9d3333415725228f7aa9144a6bf465f1d6f9e3dc44329a5c45caf30f1932bc216281b40060cc6ed5a3ef8223eead1997464ebdc94073efe08800b8e7d3c8143615406d9842e298ba7ca3975c04885108ee22e25c988a8c08f1147150bd2a1001c4e4d2f188bd99fb5cc8fd05456c474cd2a0f99582b5c8cd23769ea5f1ec1cfa5f975effb75fc52c1722752c7ea7d2d289292387396e441a29ec5ae93052d256d59e15439c2bbb7aff83878debb835730bed0465f8fb4e57de742739d6efc0c47f5f5ae80e320cd30c93709e846879f1e9692f958b6fb93233acf44ffa3875c6f4012a483ece3df959e6c0b260e9467e3d67ccc2559dc3796203235f3efbc00ba7cbc73f0c3675990fe4ced14ab5193c36a54a3b7acf3ffcc33176657603353409b4f78bd14a571be6edfd0cb5e5069a3d133c4cd5efa1d93d953b03c0eef0ed159c7014967cfbb0d7978718c1ddda7c1d753286b9bc35505311686bc0dc18a84795bead2912675ffa3e26c590dd3282989cc3e05550ca09a26eef4a96062a2ff3d319a3b51787a887805de47cd10fdcfdc47d3d218fc951acfcf29fa2b07922b9ddb8c7697dc2b2f0804c0e018cbf21c21f48fcd3e9d5c402b084d05cfa3b6de5517ed13a4f380ee2abca07a87209d75c140c1c90bf74a5cf8f06038f7ff900b9d0ad618d7a35f1b7859bfa30a65762cc0ae244e0dde45710177bba8d72678d99489273a103a1cc8c05baf8fed98dbb3a5f85f8fd4898ded952ba043e8077f97d35deeeda535b8e5cf58dc6e3d759b8c3bd5ab3a7b23aec75ed8732644328b688af13c12bc52c601ee49ff7af7a2147e8aa402db9a8a06b0553c35bf18bca78b051b78aacdb4bb0f9675bd35f26cdeea22a7202dfc36fac29ed4d40f74dff94034d9d23adc4256ef92591ddf8af9d707eb19c5917a4f710a93f6831ad9108241d6b5cc020ba4945f44458f627f3b867449b395052f685b4c761d10939128d83069411d0b96de4318cffb6ca3da3470d0ddfe60087031d5c848050bbf3c56c686ebb14c47c55ec8cc745bb85ab61518229dd58e6cfd1945fde116ecc4d03fd2d00e14e7f6f9c58e4db97a56672c2e6737b9dad8a6ef05b7f41b33f90e7bf9d0c1a9548942a0a1ca5724af03f6db8726063accb695d93868e3b504587fe599e4eb9ee059882e5ac94d3359fe71babc1661e5571685fef3e8e634243def27085c912afea4c632f41b050d4240d100bc7011dfa8d3159ebd80ee170cdd2d7955bd7a399b6434d37df559926f90226fee73da8409972134f9d6303352852cce89db30defc632d61254cfa730582a0e870e269a50f2167c560b9d575daf19d33f9bfffc02496263b9557ff2ed2662e76b942620ca756621847787a07b4a4cd067d33ae127829b170eaba4dde265cd8d02a16a2cecf9365345a79888b9e45e3524830a5fe2a4c263928484df2a2070580d25bf4c48de226944605b945f680161ae30ccc4f96fe7daa7fe3d2b0bbae803f096fa2127b1d8539fafec34784e7fbf66b82b31100d58e493853d14d64a752e56bb6a589c33e676663dbcac4ef02d5a83385baeb0c9136c01bcca941e3a41b77f2cc02897a8e795fc0e1b020ad8638e87054537fbe96785b57a34046e36b0aa314e1e94fd4d5df68824544221595e454eb570ecbb02c5383fafbc47a32cd8cced30855e4e1c7fda777e5a226b8c4ab5d9ffbf7751da9ef2c8060404b3300f3fa12e3d296e052826d2667f6d402e1eafe6009873bded222a46f371ac325943fb6ed851ec7d8199400f1e55e44513125e9527bfd589ac1af09d8b9cdce1b00c51ed8bc7a69932f7b8e9464be5b1345983e6912b545d1898904e76ed5a4b29a5a4a8bb3eabaafaf6eaf70383be7bc7aead6f5805b536eb2d2e402b7631f0fefae010e8e20989f7dd2a79f2634f83a398792b83bb4ca71ba283cf4a185451b563f040f6b4f85c3b3703c880fd7ed3ae2200558c4655712bd2f2b1a18066f34a461c01e868f1026547fb0b43b5844af63509487f070d9a96cf42a21cf78ae209750a07b4d3c65d2462b577cd13fe8a811f4951b74235489b80af1c28ce2e47789c567cda1dba0483338acad7e775d18507a49b78d2d7dfb25260062700a56642541c9723a8d90d300171c8aaf7a7d584252c9922e540b2b057ac95dec6853c7022996dbcc20fc79f2870fb3ae3f98cfa844cedec88caeffc95b00d6939390c131bc5180db1f5c9c4391d07d51669a597fa0c77e29c652e461205969ce065234955b14fd985f1af6c3e73d6d8b430164e341e631b48c4ae4b5b6faefed28e6ff3fba59eebd0032bc984e7e42adf77bc521611210cbaad684315de0206ac0939bbb112974fad6d074a7f72a19dd6f9b47209acd52d1979ff5a4ada8049588ccfc0258bc5b3d8a440810d367f5fc9467b1064f8426263838f7090637142613139cc399e7512e0dadd30317cbd382ad907aa07245bc11118a36c08e804ffdb56ab823038f2b90dd0253da9db845b6a21ffc588a3d1070f63dbd368402085f19ad3ae50135c1f80345d328bcf2bef0131128625fb992c3314e96691f176003e96299b3a257b2a16f7cf182368168cd679672ac301c6b1816fe3ebef8010798249c2e89368e4c8cf1ae6c8862124eb80267835a8ebd80eaf0e9ec95ddbff72b595e122a022aa2bc2e2f7a50344b6fae483c2c977e236c93f2e1cc359d25ed1852ba161f6bfcd5fb865a85e2e0ce286c428d0e769216b9c05e4593579bf9d18cfc6f8ae521a95b736a270dd85c3cce498db2f6839500f80ff7fbfe304dc8098b31afcde00a4eff75bbfbec77459e46ec035e05bcd8e2bbc675106b022e21d3e9e1e244dc7080cc4b3147eeb67142cba83254de18c78b8fac7a766f4804bf87ce64c2b74cf9058a5ce6c873e88e00e34847c1cf3f8a2ca9f54c9cfdde1a8f7fa1d48aaaedca2d6b7e638971df05cc85e75101c3140d59e4d02f6aa2278298f16323dbcbc465a256e8a8f9fe45cb82b072058cde7152c8aca0981cb3e741b00eb71bd969bcf15a79b1d77aec7395815e26c428f656f8d0f33f5b1de8d5511aeef33f097de8f8ff0e8bf09f256e061a8753a2ac29b6e6ea26ac4e6acba64c5a9c3ebe8712698b8fbf08eb55097a84f985148e5152ccdb635de7ce4eecb4d34c19e7208ce2b0ed73cdf842b4844cbe906600f6f6c13ef21b1aaa5c302d4a5765f9077f9f1926e65ded92a6e9b8523c480f33753902dfa9c35263db36fc8c5e85d844653e6726d512c909e0829742a00abc1c2615c8f6c12f2bb295ddd18a1f9227065bd4856926db4ab7932f900599fe022d425f3b1d33863e8d08aa5a006f55ba4b521924c6a338fac1d273453fdfd84f93831024460186234d2666308257d3d1ca2f4071dfb714c0bff66b3560d9f0a011c8343bc966942dbaf07dd40b8b059547896ddca8beab8252bc5ca01f56c9e85689b1a5adf55407157a3f5e2d7f1da2bbefd13560352377184abae32dc89b129e9641d1a1171c7aaff2c7ead73a8c24ee72908b54e78e1f7c07489f210032ea52235d2450d45a17c0da0eea21729ba8b8bb1d163d2bc80690f4d2231e188fc24b848e15ab3d901e4bd83a31545c1dc50ba3001e34790546bc9ae91f48b92ccf65f75bb1fc37cd22c0f5eeb2d50ab985edbbe3f5d345c094e7ae72551728668e3a5461916e4bd2a1cfc7fe31ce377de7f40f872babae0fc17fc4e750db532afdfca02021fc5232d5654841cb49ff5796b4664a6d1d5b8be31a15aa4ebe833b1c199bfe7ffc0c610a0d4cf4495fe049a284ac732205e6c2029144724ce9c800ece6595c81ea02a37ba1cd5e8422b8583d1c2255861b505c4cb01f787519a02f9fb848be528838e1d40f24fe9234edc7423e680ffed30b80ce521adf3b806898a2e90778f77425dacd7a99e01df03bef36195b91361d5fd2d618500f6cf03c09ff5b64e4c3fd174264550bc0787f78a4be80c2a6e7913aeca8f990d1b4c64de132535cf5ccf997d6ed04fb77ade284d313fff2ea0c9f6ff5c565758a3b716570ca8ce48d12e7ee506ae117dbccbc8d117e0dd97d8877bc396548b980506e0646b16d2d0256d57ef063aca6b163bf512b7f632b0747070f1b3cc5f7df847b44ab73ccca2f312e4c773e78f7e7346e50aa3177fe115796d747189d3cecf9d34df266e4d3d780659c154f0b3b9e82ac3f824c3f0f8e132512fd655e15029e540b07fbc02c56ab8", 0x1000}, {&(0x7f0000005000)="963264ffaccfd81e9cef8ba9e09acf991ca7a5a6f7c359de91a62a3c96567293bcedffedab685fde03c46e411a61fa83d79c73a0f74ca2445c", 0x39}, {&(0x7f0000005040)="f3b6166f85047ae2cdc0deeb5df2caa5509209e5abf0feefe310a8b4344d2a447feadb59cabc18bb8ef4272cfa4f3d84ab477b752e44d9a98ae256f25474d174ae0e987b69f745fabbe1d1e298599faba4ebff4e16fb33ae9d53c5f5d028bef18c617ca753d72fad4bc8bdb52646d4b46dfdab5bcfe95b5fa2cec209166ceecf37ec421dc22a4aab48f34da892fb0b00276eed15edcfb4cfe5cd4eed495d98f8fa3697916d09b7ebb315135e6766c0f732e656d9503e29c69d5d73d7eec6f317a6557f862ad9fe05c8dbba1bc520a8973f70384adaf1d750e8e0819ab75bd78a69a6aa706eebeb3ba4fb5d812958d94b9a03779ba80311cd8a2b772e43988c8de14599b4a0ad84b6cc7ccf7306815411c9f87ae1717c8bcc7dcfb9d970e9d7f328deaf49d8fbda223dc084cb9ab44c177438f7c07b77afd0c1187f56bd71dfb4c708f3521ecd46b9ad49d5b8880d88334aac3cf9016aed14fe7b80c798e6a5df7d1812449fd203baa6279ead02fb9737053a2c0c4161f27b1229dbe3eaf5a2a34dea6c7cab87633a87ef000209450db7c6364899741bcd02c29ffff577dacc3a7e0c759c276a8b7f98b7e42ecbe0361f73bdcdec1c060fbecc18812931388c2e4e22ed90a4bc5564bcb0146a0a9e3a638798094be5a7d245b91292f6e76814bb7b07e31fd959651d36f3839919997050f8de1734443cbb896f8422cbcf66d1dfa45c58674e61eb3c91824f3b1e3b7abfde111bef96f1d66af77cfb8c76cbeb0c8be2321113d57c389c56ee56c9fb92b88df877cbf17da1d1e5979f1672c5f1e36ee7ccb3ad7b655b3920f6821b2bb3fa16c18ccbef916e3d054f8d31b438227ce9601cc1fd7c4dbbd5dd67deb9638bf57186febd359dc1e7cb4edbd3fb2c3f1722e094f6c9591c81703a55d532287a4debc95f9ac08430ee1cdee25477dababbc65eb2b290b91589e39382974e168671267e5b8b975a1928d25dadb55789d2c280f06520c44bb45a8689cda76f06ecfa2bfa7dbc79001bf7337fb92bd6f86d7250cab5cc7530521b3807bb25f1f3683b2a691cd0ee8d294aeb84e1cdf7b1926b878f6f853efb286f9f82e28932905e03c5fa35a8a67728889a055a3e01125220155d9845c895f69f46b198c1ac1f622a7dc32c0d03ea2564181ef0a6b1a086fc5e3868e5b7dcb846cc4219c86e4c118be6e58374b6bf48ef86b14f391ba7b9953fb0762c7874483abad5c294b30949ec7464418d3d8949cb8b8fb6d7c79156b4d320d0d6b80fc0ffa7501a76884744b44f1aa0106d782add99ef90134611dd4156df1c7e68073ddd37f2966a62ff0e04680258b31c7ece1404645b1b7ef4f6048938c2fb5d9b15bf4f710bafb0eec1d7fdacfda681b6c7c684616db89c12aa3ae597762844dd3aa3e73381c271e3b034a9986429e7433315ba38fc3200be2ee748a005443b790dc102d0b3acad2dd00528557b8c8b4eb9f48720ac14c2bfbead26b28bd964fbdce538ae6f65dc3c75dab91ea87eed9adab0b2d9a77f29c1dbde3161e2066668085b579cb7094022f17edb766dad22726628caef0ee82e3f2bb6e73e4dd1d5a2fcda72d6ec6d75956797a65a9f0d1d4fdf3fb7b66138609e16d4cea6765562bac2e5217ae580d25a4ae4ac4becc1545ae0a59647668d3c792bb39c1bcd4e8bd3d463fe8f72ab3ffa0bf402e2ab0b10d745422cc5244ba2847bf86485c3562f6a3aa4f16c42157e0aea678b88f5f8981f82e00e2b4506dcf005e3b792a3c6ff9e383700da369fe017609503443237ad74cb5782c988f99d2b9f76935b4bf4e3fdcc16a93dd04b49872f5465a42b9d9e54a2e01eaf850a357fef51f68e753fd740a9407e55c71b1aaeb9e9a7a36f05d980f30f64f2d9465e4aafc5a56eea1eaf40b513b76dff997392fc05474e31d0938fb2f4e03869aebad28d790d4bfcaca84be205abad7940798d43f1b11ce7f449fe2b96e0cd15ee7fc8b67cf53fa068a213ef26f04f770e57c2c99397fbb37940881edb03112197205957a91c1531a49e0da0ade7af0fd4d94d0411991f8f840ed3c25a144dc98d53f88f4aa4780f248058120018ef5ad754eb70f05ca61201df7835c533a8430aa6d5bebe885c5fae07581e2a3028a1ce4e21a555fe58a2103f297bd12691ed7db1be58b6751fc39b3eeb5203491834ebf9ac300878eb0f6873b211d17b04584e403f8bb98c289f8938b413f152295f35f8f657edfef334f7f69e062da1eb0e642ec4e89e811dccb3e21323db43e6b54b290e7e585e0998d262e255704bb4a0ff58a27944a54c926d4aa151b5c493e417db8bd8b6ce89d788fa623f6a2558c13bff373a69a43cf64cf026e364455032f12af5a26f9b9dbd8d037cc4a1ff98cfa1cf32a1fbf479011ae148e47677ba1b62b912d7321f8ac2541704366b9df5983e140403ec50e7f165270aae343101bb3f22ba8f36a544862c736097c9b67928ba756bc03f97d3fc75bba15e564019281665f0b96b09751db309e8feb57196b6dd4779d54171cba72de4138d7a61983c2c77bcb25a99202bd372842d7fc96d64d66f75a4958d3b413ed2ad56033dbe19d7592aa71742822038a8ba95211d972f3c26feda0e7fa1ba34952fd60707d88bef7b8e5aece3b4557928ad6ba5a4ccdf5376c98412b4aafe7ccf2ef9feae1bffea8687f6dee9d1ea31c1ec816f644a9d1a96cbdcce4444c9afc8a4a2bebfed73dceab921e20d1441cfcce43648561e96903bd9ba47dd86bc6dceb9907b0fff324233cc38e849264a95aa943cc4afe169d535478be57d1c376a9ff909e218163611cb57f6b40937db3b6452a18f0246ef3b07d837847545ac2840628688182e88807d3fff573b4b4c3cfeda7c626861b0496fbc99d6803b19bcc1a996e564816b8f2b4c8a6e600050b501a66ea2c72b269024070756d3a844ac2b8484466e2344b9c2e065013b9f3d21b707728aab81c8c0ac18e82f73a1312891c6e5c54abf657d5dcb54d86721b2fa5e1101fd99f4563cadd344d00ca64f94647bb1b4bed9b7d8ffa6d1fdfdc312712ee1ff7403076a3f2a12418306885a22e6d5ded399c4809610eeb8dbc2793bc04ecfd144a9ce51a2a0d258a2ffd9c824e3f0bf7a2f0c6ac09fba32195176581e4f232adb2fb0fe8ae5ac11de35dc949436fb49015793f844610dfd5a6f54a431cddf632f3ada52364806c09af0ff83cb6148b6e6df34381a30aa48d32233d3b0a505048621e8cf57b31e3af4d03c652e85e251f41d83c3695c47eeb961438f31c0f71533dbfdbf7f942e39da55526677c0afdba0a3836a484ab43dac9a59d5b80cc34e3bbf97ddba248220fcd43815f9c3165eb2a3d4982db16683f2a591543a108f7c565c009dadf7320cc5a40f4e960eeb8b6396d521cef95f2eddf03879c21892fa7a2122b0264ea33c5e393f02e41e85e43d321cdec369d12a830627c002dd7bf6fb6bc900a695ebfd387c7dadd1ef24d6d91d34bdcd30fbbf3b575553f0d24e9664460f5fe08923cce6c34ff2284d4822d8f72f9a8512db8bfaaf1f0e5581b86aae4bf5ad8f103edc429e38036dd6709d231caeb63cf069e8cdae32cf50af98900d0575c574f4ebf2265adea0a16935801385532b0324eb07841b1bd210c2c2a700d58658f8b1e72c6cd698ae2f2acad92d4a120e8bd78ae34212318dcaca623edde792be72218239b3f24781161b924c676948175afa23da5b48217413d33f78c614531e07ea4b3d042dbf4d15e4a675e0d7c890c8fa82a16dc5f4c54f3d7d8e538ebc6545d500b5028635e4a5479cd8699d66db7207b3a478fe7661baec911090befbdc8bdb52019d24374f52c9c24141bad0465e71e9c364592f770ce3f02170ce73716aa174cbcbe2a7e9b86b8303553dfde85e875b21caaad5c021094dbd26df616ec598535f92820a42f42b5f8b0472cb8cbe7dc8199fbbdaf9513ca7b446f16e50560f480ce8a77657b3416e12bf1a6f36642f2604439cb2fdf0c59410b0c484de10b035ca3c60afaf090b0cc3ff94cecaba06af419bc07aca7b0e8ef913079c4957929724d44196fcef1380481e121fadef1c69565be6c5f8261b1f186d4f39a0ca783418ab98ae4ffaf625349549d7bd7a4fd8049e47bdf00d0df9d951dd974824f7335df7bf2c6c85ff191d31d6f904b0f912ad505c5beef16896d898007a2100f527b079b0136f24d04a44b36456298ef25f45a72e79715fe145199e42577e3e907dae6873a7c585f86e53b745ef416ac9d052bc045b6a014a66fd2577ed243602c3ba5a0aadbadfa7ed8af042be24d897c2d665b9430c1f70225af6cd727121a97a00961c69abe8761381d17bae3b8052ce83643dfa672902d8d358cf7950c087fb0dc8938fdb4a39e86d07df5e09f0ec3b2f7a5c6f0530c176ba0ff4425ddaf8e3f1e0d4c4e7a0ebabb115c1bdd939c17a65d30610e6ab88a38e4e93d794a1da0e8fb03a8766625c9c339ec17a3dc4b67fb833c66abe12bc9d25091ba2d06e627b44db36f5ec1ad8e6272363ec221faeda756f284df736e83ef705c4956c263332c59f98de710984b4fd42e017d51b23cf83f89a2527436349105807835e13d92f6373667c8f55065626f066d22078c032eb745d39f7020286c2e274ab35176a7ed2d8f2e900b19e23cf9a8c53602be9a63cb8d16b67a770b77d49ec1f4a002b985ffb9c0995d6e2b16315c714d1e20a6ddf5ac594768fd997834f45ec18ddf51d9a650b26b3d3ac052d1056b7d8d81ba9c6b89e54b0e497f60e4c694e24a2434bceb2849e6330904d7a2cda8100dba31182adbace162448a0f2a2831114e881ce620d4a5ec4281a9a63a8bdca3bc3c8df522b6337772cf66c4cf8229f8bedf980bc19e37673c91e7f9cbad8e65cd71ea41705550071faa9d1f92ec0ad43b4b7d3aeb705243c0ab7305c09247184888f898eac6590058d299d214d7b81e24e503c7a1ca6ea1f1d6998de5a30c4fdaeecdecdab30568a9c4fdfa80487aef617ac1d29aba1c9bef61c20b798dc795c2f2918cf2e34e0da684876bcd015ad5355539a20eccc418f38f2b46ae2a015ad3c5f703f8e740e68771cfb50a56d46526160b9d553028a1a6efd2d4fc93f8756e1ad47da9ec17628fd3aa92aa5fe7aedda9bd503d065593357d221e7510b8d27bb641ab188f691bed452eb43479f4ca2aa56a4a79f1766b68c37c9726e51bf9267b70532a008b287c600edf332220d8ac3bed6a8e5bb3e81b01463742c562c8f772928fb1888e8a7353fd88f91fc36c154ba0f84ecca3da05da65ae6bbec99e6042f1da6b5c8ecd0c4ae457eefe0b8135f971e39c933ccf261295d3be3c8b94598ce086f418764fcdbbb8ea1fafc0033602a31b903a01d71628276030cf0aacea4f1228c51f898ffa63413257b2e489f9062efb8680da6ea5e1d45b89de8eac97725d793ba11f384f381030d7265ff29876bc3e3a60a03646ece42ecb7778dbf12934c2d328cf98d1df5bf10c475749ec1608020cc87c228c7210944b6f95ea6d681d88ed43ccc00a40f506bd371558e5353c4164e918b68a086b6000b5b702fad1836ff6d348ef59024bb19b85a6a9c8785526b3ec7bb8533cb2dfe49e9fae5a56c858e46396b2319a723b0dd7b7bced3c3f7db7fb7ec193782ba056a13fd1165663dbd3ebae162e9fd98fd6acd018268d2922af1138c15eb5f12ee3cb91c7cdb3ee94a9d00abf8e9cd75555d8253a63e188a2152b7fa2e1a5b57497ae058d7510441370f0412181a337ca5c3b9335f8578a0d992", 0x1000}], 0x4, 0x0, 0x0, 0x10}, {&(0x7f0000006080)={0x27, 0x1, 0x0, 0x6, 0x7fffffff, 0xfff, "3d3663ad1565386e14fd94a0b34e764673656ea56b30bcf7cefc4bf0a93dad58ec3dd2a3c8da30ae54ad622b703ddeda5a644cb3fa71a1c45a15cc04f35879", 0x2e}, 0x60, &(0x7f0000008100)=[{&(0x7f0000006100)="849cd65c6e52aed29067ee8901f74efcf3be7484583fb14b4acf5ff02cb4efb9bfddf6d3fcc4d7d5817b7056f39f6dc3f53a8e74bb6ba23632ee747fd11175c06b22c601a5b6b5a8680a0edcd5a5716d99b370064e295f68396d053233a39a5215d95345104944df3bb2e6ce05db825b0d4c42a2ac8a12cad06714a3aa3b5e306ef3eae945b0a2ad9261882e014da56fbe751937925da0388ea21f55a17f46f952fc5680fd030011674d53b9cfe9eb735c7137225aed6462072223e17a9ea10ccb7c2d5a593e6ac3d7471f3c0f316ef622295282361e3413978dbc0eef67fbf224bc63288635dc6205b89298bbfa97c148b5f67bc2452ec4d9d1045cd64d9ac085f666ec980a12a6fdb1a73a5c8fc069d1c6888dd4fc11c066dc942116fb856bf2b3cf39f9ccdd73accaf02b78eedcb6dbc922adcc5a6aae56590a4593c0a011d246a562e511f9f58af604c2115d7916462223d15d15e663c09e097b11639a029254cc2861b9c6e7ed8bd843f9ee28ce1e43d79d2e0a2fe94cc0402d0871ff9b0230fd1f1d2758e58dc743935b965495b228f854fc43c20813cf1fc7e8e2af8e6d5772830593df080b20cd10692e94315964ea923a197fdc505198f0ba7ae1d441d1c795a5ae94a27b9144769875cdbb6723c6a83ab215bcc7197e2e40214989299ecf153c6a7db98b37664f83240bb2c9b5d9ad1639060b7cf654b091ce2eabbd87482b9a8c7e477879c43e00075e884be553a323fcb7280c3620bb37f12f74b7470cfcf342a17cf023d3631d61eb2ea99f0bbc76cb70a64edd7845d8db1a4cf4b9a37d12190e641ff71e645b5fc4936a4c78b14b04a4e7b91e498f1e0b60fdb31d7e91240be877caae280a725f608dc007d92568130410b64d7c05f8e9a7e8ac1516d36106dfb165bc1734cc7535f4d691a5b88ac05d8ad3024714a5d057c0b8782a9d0bb2eb2a1221acf46c59504941dd5ec1ad64fc1875105300b30481a90aaca9fadc7ef9ba8f371f9ecc3dd6ef218373741fb778640a8f35eeb2f7a53bae520d0b58dd5fa81e50477f7be59107fe43d66172dca20c5caa8d08ceca1e5dae2035d6b0174a6e58cfaf23997c418a1df4aaa319feef85699c5a3fdca2132a05793fade18dbf8e6f2b7230eca5e8519e0aca431a2755390aad31c3cb18540feb0cc892f1522e765ee0753440709c6202eb3565c240dee7362353f4b2f51f4a89d03811bb5eaba1996058a61edf7431c33baa528d35cc4e535fcf3e06f8cb52408f40d3f24587b1daa679f5f4d49f82b2cec2e32eccb4360b6f01aaf46d86083a7cf38bca84b6e881d8c458711ee79ee2db4a87b3f216abc91b9cbd58065ce39e0e06c07a734beaa44e544cefdcd29fede249d8050c68457bd064270fcbd9d91f1ea2919c779d062c4d239085068d5763a7a70a4e1ae572773d172f612b74fe5f71c7dbf552e4ae2c29baf63662fc77c198b270f030f49bbff1c06a9e7b51825be5894f51aea16a17ad13f3b4a95d7b4ecb217a5ff74a87a7ed59b352362f12f06d1f07ae98e1e17071fcb4e7d6ca1ec5c4b9decbf75eaa6cb29006026e1b59ea4b17cff241875661fa6154fb117e6b2fdd735b0d7386b7d8ba1b8f974d532c79d0379e942fb2bd7127c3eca0f12674f14c4bb79e62ecd58e53eb51d00e21933c554bd4fc3d31d32e29d45c09b901f054b32d3f906e6c6f06cb67e363d21b9abb606d6e939b69e05af1260f1cb8941cea77336ed37f83023821544c3596c47eb504b6aadee5bdce019204319c44c0af6ac5d72d51f90271097362c861ddc745d08d45b3bd3a45f79323328389b274b6dbbd327440f16a5abe7f2a6efbb80c06236a938eeee9eb83d2de8f8da7756a7306cf59a906ca12acfa4c9cc5ea5ae50ccd5bd77a57be9f68d7ef6dd599e33e2d55c7ce92e351a43d8bfe79cb7f0534793efb9a6af61665b6791cd62a8344f8394e94ef30cee1c7f1f3bc3a3ef60f3b84e46f8a55e9cd01f6e24aea08357f9ff136441452c5ea68bc6ba2eb8e05f4011280bade3d09ccd84ab604872bc26d71247f71bb0e15da2567f6821e875228048ac08dc5e99d3b1005d05e7186c2d803dfd666b2fba360eabd4029302c07e70bd4ac2b4a25b45a315ea8b1164921d519764d77e7e577921bc93d033cf99e234dfb2c5e50a2b208e28449cdccd3e7487ba9211a15f8a5d3e50e1330e08a89e59512c4e27dade88cdc0fa812cc194acd58f9e96c43989a572f665336069e59804e8a91a961f521a3d13ff91edc21cc77b248b4756626943d3116a6ee1ecf000de29d9e1da3c3e4c8ffd16746f5b02d7b7cf511f06b8b9aeab125a73a8675a5d5c6531ed8e340df704cde9e06afefe8548a8a5006e9e94c3454a9e43cfe3d3e64918f5f564bc2eaa7cbd92e6857d265d012c6d63998aa34677645fc460b8a99ddc65b6f9641ad509c31866258d61a98d193346834e9d25c24f3e8c0ecee08d316047db00e04472b561e5ce40316d01d2e5cfd21f8e2e988a030c0b19302e758426955cc994ce422a86649f3125f45b3a013a1af5a9de0111e78e84fb1b130a503e3370a8f88a9940eb33f003a40fd431d028089f750512d6c8e1430fd5f02b00f4c0dfe9f17217d582530f85868a3e31930b84f69d6b3ef2414dab35be63efe93bd82d6f9282360da35c43ad972a88175c3be5bd192e3b54f22bd5192b4f0683a82a060a47f5a74856d840436c72eea1048cc237781e90bf21c462b3bcb9949cd6158e6278041a7ec9c2c99511297217d92e7572de82f138fe457d8a833d7d8994950c171a48fc09a1ef061d2718fce911614ef5ec70f8f178e24429c96cd29d45578a3f289d3a05e1ad633abf5238872073ac1c560ca31941389ffcf921cc51f40dcb7ff35ecb660eae6c439bfc554c967e8c788a761bf470f5dcb1199b26eb72ad42f74433a1b21234847c0377308a9e2ba9dbd8b2c097fcbf469316747e54ef2afacd31d05ac5eca36c5474780d8c9859985e5848eb499216334345107c630155c169f0b88bbd1a85ea87f2fcd877a3dde9cebf1cef646e948f51b63fb8e178788a0d97e7a6f925ecbd01dabfebdc0336b0ca33d1ab1a3ecc1bb0ad520ae389ada75856ca28ddd311564085c9811fb1615cd4c4e157fd902431bb72112a5031a3004faf1cdf712604c9dcd586152558f5b412cfc3f7971bfc62be748166495e535ecd29fa67fdbf52c2bf28b7e22b35ea67f8ddbd507f508fe1231e834881a0267910d874b71fd6d41f257a2f8ecd7e5171650a96a542da6e72dd0c459a21b25d77e0836f8fef1ce71b5a22b328302eb930919479f5e0e0ae43535c90b8a0d2693c8a104b68328dbb0f780018576414c13a88ebda5a5dc1e7bcac82f9fc3411f5232d1caa7361ae21575937a05a7dad2c4b6b3801ca634b9f80f59b0d5d06ab1486e259586ddaa86e9833518a7199197117ff12aabe7fea68fc82f205c0e0ace310b24c5ba73d7d4e41923aeb93adef1ea434c385bc7a2b8e4714b465b2cce7dec0ef670aff0b49d3d1c8d60a28769c1750297dea71d19d0b1de52bdc19bd4f6f0ffc08770c5e7f5c4fdf2153227ad6209ac6dbcab989b222068f78cd44c830c45ce00ce83c1a321a15024c90ab11a0259947a3c9bda565445e9262e7b923628a688badf6a05731d07ba9e5f92eab92f14354618c50f8c16100e4c705506d87b8f8592ece7fe79e53d8f2a59527e9248e858296c364a96b2da808a9cc7a4b71d0313de7b730690c3e3b58a8d83692a2ae6dada338aee4577ae260f45e8bcd2af0238faee9b3eca7c00b947cdb87fb3244e05f9529f05a99ef01bea7dfef60c4143e59cf6d70ab1346cd70faff82593a3531790b27953953a08186b2a74ea4f3b078a4ed5f32d6f006064a119cdd569ad1ad800c567f5d9fd93588089efb90ff1614f80124e397ce4a0cf8a517b82cf4002933cdb3914b1a9b0ced313c46ac287d88e19104988c9b18728c48f9dd06299da911c164d5cc4e73c5971376f0dcb4b0654864733ae3ba3f113428781d1219169d384f959dbc53948ef02b5c328d0ee1be6d5ec98a105b9410399cb9208657ffa1c6168f3dc0678f76f775ee16c80f9d9f6e074dd33b8d7a4322382899e89ce3354bd49cfa0ac77f1b379e3309e8e01a9ef10d2317bbcb72d505241c8eaa865b81b80994daa48aeb236825257c5a547edf009afd5c7e05996701c6ff43f4220e9d2a2429cb4282dff3406af723a45e6d624e237e89336aab09c9370d24ebc13f2bb0a6b7c27e76810b91476ea3787b21b3f6d86a2117cc380c97127a38051207153792cf94cdf0badd0f0e65f8550014b2658f74e10e895c2d47c8c4da35cacca24c675d7eb40ae23d36e20bc6b4e4fa8d002cb0602fa0203c9b914bfd8cf414d9e322d654d7eec8243d0032355c711902a5bf5be40d189373b0534dd718bd99b89a3808434c32521398f6e171615ab4dfbebe52a97fea7c91c398110fb6fda8e53327b4e3387fdc0ca609f14bfc63056ee34274f43beb3328f120ccdeacea237ef07d6e2be91cdc579c0a748a16638ea4a076797c68f863ddd8fd5d0e90e8ea0165c3ffa6b79bbda200ce313ab5d4633c84e15482c770ce389c289189d642cc1b0586c252e0be4d1c0e27b2da4fdbf4cecaaa6a946a4e7215887cdf59e5cd5b714910c8b4bb06cde6a466f1dafc295050d495036ab814ce2bd7fe80cf329a318dbd9d24be34bf1ae2efff1769ddf633719fabaa247eca112c4ec3cf626196827a89669c1dfff8e5b8353a9cecec93090ceb08167e1321fbc0c944c86f296caa5cd05940a70e982580a4fc99f9ff86368b49aec094ee64b4ee6c82c3e79b0ef3c69113941ef7e3a003a53a88fdc47752f149b66298ad779100252e27036513004dbe78d03147d06a23445d6359ed9ea890cdba077e777d3d15e4453b0ae2161554cb3fa449e3f87f5b53c704251e2e784808a3a73b2421eedfda396829d79909bf0111eb5f4a468bf5c6cf228a69e0d1bd2838ae8e2e638352302ab66d509b6dacd86f751f1f5571da4aade939be54ac6c1c466d46ba547dcfbda3aaf60d0ab68a750e6045fd88080e96df22252d9ffc8fb12c266828dfc8d419ed14033b1d11f418476e289b0fd5a263bd7747dd834a7952e387b3da27f57ccabf62920ef3a840afaa9cd47ede0efacf3f3d2d7f3e1f1fec553a5f306ac57d5979c6dfb4cc3882f2a72d849fc091ebd0684988dc858c03f35173b3cf18204ba4f13805e1d9413624200b3a87659bde10675373847e25a5fd1a6ced59eb442a8692247c07874742c8d5fd43b0c980c60cd5b6ac6596e5c4031dd91424508a32f374c6cb12c703bb7fcd96efab003e94e9db85549cdd07fcf18606173a8d7f8d2693addf649d5fc23a865487ab0abb1f6cb4b4dcc0ef400e1341ebee1773334ac797bc8a12a85602300bed24e277f68e9dfede60ca70374b6bd98127c6bbc0a4373858f877e9ab0216738f071675ebd70bdcc753ef2fdbdcae82ebd8771d155e2f43075d0538f4939a2b9842caa81ea9e3cc9a6ecb5f448cd5b31544e93d09e6f9500e6fb7b0cbdcad01037f0e4b4db56c60d394c5f83dd82e9cdbac5ea0ece0bf9fcabb1f5f00056a8f7f63bcb4c0658631ee14a8fae62c4e3a9e1e6c73366512e8d68ce02edaf5ff3db16b857f7be917109c14023e0290f1996adba865b7fd58c0cd51ab596d86d7a73cc107d4643f7d7c628b3275b85d61d26634573c1063b300deea679d1ac665c1b75de7a4b0b3da89ed9b6e1d3e1", 0x1000}, {&(0x7f0000007100)="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", 0x1000}], 0x2, &(0x7f0000008140)={0x1010, 0x102, 0x0, "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"}, 0x1010, 0x20008001}, {&(0x7f0000009180)={0x27, 0x0, 0x1, 0x4, 0x5, 0x3, "341695337ccb4ec415a4d57790699da940b1df2c7e0c3f99e72d476d54f89072ab28311ce6ca2dbfe8e47c446dbc670bd437c17046557d6a1388c9b86b1e99", 0x3}, 0x60, &(0x7f0000009680)=[{&(0x7f0000009200)="ad2bcaad8c1cc0ac0410b00d9a344fdb7c163cf43e3fe97a7ae6102a9a58c42b152c27a4a1b51775eef0dff994b3e9e1939a9f30fb913b3a16fa9559186ac01ce8a9c9e04cd9ff735ff3c889b4d59e71c07c1bb76b89cdbb8b18ce9e89f141020a5df32dea30fac828b59d4e550ec69b21cc6459deba636aabd15069fa2040a252bb7af1213731c77e19be7196fd30e5cbdb570ec4f7907eeeea0b740ef32f4a8433c00e6d8b3a8ff41e23d14e8d5d21b82abf515c856a91234c50670616aec980942f2d4f5e40c816e1ca6e0dd55765065ca0aa6c5a", 0xd6}, {&(0x7f0000009300)="afc9015b987930eeb7266ebcd2fb8a50c1e6716ad17662f0f74ed0df65e53f6206fd0beae02d88148eb46b9ab0380748175ee9968b83a1a58d6e", 0x3a}, {&(0x7f0000009340)="9a34b49ef462de893120f3c00a4354e0efe3316106805d2707636a6315565ceb614f2a676d4e0e9ecd25120ce33c866f1892a28828e7aaa68e69d8857118c46a6a5660618895542a311ff19932eb09ac538c1983ff9da33173f2e16b710768e7617a827191ffd474c692e839852d5dd50bbe8dafc52fc89d88bc3f6e36bab1ad33d1d527815dc1d3c9eee5d35d31d31ece8636b0bee23d80ecd0433b5c7a5874c5f422f58ca5a96fffd7aa2702659ffddccb2c9aa6", 0xb5}, {&(0x7f0000009400)="90cd71abf374430bd27fa21bc37f053af45bc58fdf1d9df4af8fee460fb638270d7269b21bd5eb969f743eb515138b4863e38838124c5e407a15b6b53fdfd0526fecba2965ea29cfc6ce3ac5e3adadab2f591935f60c4d2767796033ab33fbc5b6788e48b99ab5ff0820ff172b343f460b84a8d81f7d61302322bf71bcebb8222697dd7e2b7c50f5f4e23c8543ca73557c3b94a333fe3584166f67116f23c9a405ae362d8d702bf326cd722aae9af667", 0xb0}, {&(0x7f00000094c0)="080f12bc805d4f6b616a25b2be565a2d886980be990f22b92208dd9988ba", 0x1e}, {&(0x7f0000009500)="4e8294b02092c49e", 0x8}, {&(0x7f0000009540)}, {&(0x7f0000009580)="6b008bc8baa0da599f054f48d37e83f62e376847aa523cedaabf44e1b3700a21a30e81e01f0268889c7d04a1286e52e289ec9c15ab75d25198608c597c361fbf361d9ea3152e729d7af9ba1daa677292a529c0896125269392628663a1e86a1c0e488a6ed2c9d19d62071d45f67f1cf080ea57b5496998dcb00533f183051035b5b9df636617cea129", 0x89}, {&(0x7f0000009640)="cb75f6a430b5", 0x6}], 0x9, 0x0, 0x0, 0x20000000}, {&(0x7f0000009740)={0x27, 0x1, 0x2, 0x1, 0x100, 0x89, "3dfa9b6fd956f6f722c803461ab3cfb9cb0e5b734dacfac4f86e4070e2501ad6582e79aa0bc1fdcac8ec345f6bfe1dcf87b6d8af78c480e3686710c4f0efd7", 0x2d}, 0x60, &(0x7f0000009940)=[{&(0x7f00000097c0)="13edff0781f44d330560657f36229dec94740e2cf3dd9ea2f27a467164619f3ed1", 0x21}, {&(0x7f0000009800)="be5e3bbf18567a02f35a283bdeb62bc1f53862accc3fb12b9250c0a74ec2de46a8791abe4e2c46240593934e71c2e3b5a94e38dcf89d9638b5cd02a319fd261a49891e0730d3a0bf144311ad296caf94fe38080f4bf6864d8d9b745e9ac01ce83af87384382b7760d6c594d77d5716a7bce838e16e2dd9e75f574c8aa10c0c24c80ef7f914df699930358e4307405c5c273b689c4ef93bd266648b7c1296f2583702de481d85864f1058bf1093421a491affb98e6f136273524028db26e1593bd6705aade951cd8273a00cb1c0", 0xcd}, {&(0x7f0000009900)="8ef973c4679bea17c0e6928c15e5e4ba6837eeac7d090164873628d65697046e6e936370fca96613b563b00d17889bdb9f1e8b389959d7cf8f6d71b1fa518b5b", 0x40}], 0x3, 0x0, 0x0, 0x1}, {&(0x7f0000009980)={0x27, 0x0, 0x1, 0x7, 0x4, 0x9, "9c3d54ae9d81af77218c67ec364a4e6c3a14c409cd00bba0ddc26322c4f1cc2cd438317b3caa38ba4869d67a3889090f926d819b85cc016f4b3796f36438ec", 0x19}, 0x60, &(0x7f0000009b40)=[{&(0x7f0000009a00)="8d8817d5ecc733a0b72a955a9bfc4985a778bffd16d011fabe2e58ae93cd152c5250bb40c57c2ecf083c35cfcb2295bb04c9372277ab10bc724434bf5ae40907a407f79e48d76bb21dbcf9f0b39ff9c9fe69480b94070da7694b76198f4d46253d52d059b99fe221b503a7", 0x6b}, {&(0x7f0000009a80)}, {&(0x7f0000009ac0)="8a7c43892651d07cca06b11cf76d5f82f6d4935e315ef40a19c896fa97249fbbc4ccddaf1820131211cf4125", 0x2c}, {&(0x7f0000009b00)="3b4040b598d1a477f85c22f4c46d478c1869bcb2", 0x14}], 0x4, &(0x7f0000009b80)={0x50, 0x11f, 0x3, "901bf25190fcf6e885ee062b07785939f973ffc8e65635a2d11c8b5ea3a8f7edca70932708eaeae6dab99721864ce8563be69b59d3f9479350cb2a42d5fad0"}, 0x50, 0x1}, {&(0x7f0000009c00)={0x27, 0x0, 0x2, 0x7, 0x401, 0x342c, "01e16468c77bc06efb43836b8199a0b5798d52cda4aa26a2ed33cc685ef09298ab55fb33c114b50dcf1c382afe8cad4f4cf06334e2d1e8c512cb20ac8ac8ce", 0x4}, 0x60, &(0x7f000000a140)=[{&(0x7f0000009c80)="c3107cec9a1085a46f6bcf355876c47f6ac0a0aad1fa74b76d356464c7b2e8c719973fc7758c79d158af0d85d637dd0f0b7bfbcecd569b7c8c0dafe6099ffdc5d1cec2413f124a35a974f8c9c975d9176ae30ba33b093c6cf3deaea62beae9d3c677f260b8265904b472193b603bbe030ad24de134581b6e4567e2b1d36c5ee30c777659da5d852f5a", 0x89}, {&(0x7f0000009d40)="ec4c816b172456e9864be7970db522a0", 0x10}, {&(0x7f0000009d80)="14ae76426fda7a9c0d27a585f7d6ec650bfe", 0x12}, {&(0x7f0000009dc0)="aaf2153efe968b6e71765fed83f11d0051b866944fe6044d48c1dd477a1a5ee5d28d61434173844700b1788d9f5af176c57e5fdef6b35d576f500919a1e0a3be89c3205eea21623b807c9228f772fc4609935e1d7bff56596317e7e245c8dab40e11bb9560e1af04f5b35bcd860ec897481ad1e0698af15d557a52e290170188d309948778c1fb839f66852335", 0x8d}, {&(0x7f0000009e80)="2786f57d9e411057ae0c13fde9fe593f84c9399b06263fff7ae66c4776edd9df36993b9b61fdf8773d26810e73813cbf3d683e7918c784e97d852e791746138e97cc2ac0e63dc404a597daa67024e1320b0b988b95c0bafb409da3af130951489d5763262728a87330d839fa9a9c7d6e7653d4d6079aa54ede2d2208dd1baade3153ea03086e2ab2775b6145c83d883f869da1bccf36815d20410971984544a1bbcd5dc2b744cd16e3f4d287e3d8ea1ea69891415b1f898f1c9d8cc5766a99c9a7f389856e1de8a1e02496", 0xcb}, {&(0x7f0000009f80)="3aab9c0a75c386437b17c85f5b6b4ec6617b69889f0e63058bd5a7e2e72836e5ff5a2ff470cd132b9fa66b25968a0c8fa3aed81ffaf8bb5b93e348b131a5cfbf119cae1731ed97c2d55d1cfb95d60e65ebf44f096da806d65b97763f65d7071797abdaab50a8d0c562bf2925ed9aa6b248b14cb7399629254c5a215a9539f51314e0e53249b7cd9624cda3a35dac7533652045564141008d8984711ab40e921ead8c52d9c45605d5cfd45e1aabff728dfc3594cf57894820d605899c302cdb", 0xbf}, {&(0x7f000000a040)="374dc12f6beb20fd1fd53f6dbd3e96639c0bcdfb1e50466eaaa2ac2095ee2fcbeca2646a77d9e5aa59f50980fe2647c49843a6b9e6e0175f7c82a98be4f7f843bcbd32871bfa8b5a183f121a9fe9bf8b64039ec5a98a90c3d8a6a6d585adac3308cbcce182e74d8b8720708682285bc5d98fd3668071820ef7743e386ab04e2d71f87de51a1e971360dbda2918cc051a300d34acedee1c397404deda9ee81afa060b9fce89b6db514bd10dece6cfaee0c6ab8bba33c123b8397b087eb2a83b1bbbe03eb25824a9ebc0a67eca82c3df3c66dbb0e7f9deedd3d9b6a147abce72", 0xdf}], 0x7, &(0x7f000000a1c0)=ANY=[@ANYBLOB="f0000000000000000000000001000000612bfb6cfee3268d742554fd4c0dfae0291e80ae4c399ed2497050cd0a548bb7154872eeb993ac620da76d2fefc695fa7caf929e70a26f359762bbd94c870b4d52bf2ae737cd2250c98b931f4c168293f0a31d7b94be186c1aad538c2ef68c9e8a86a68fd62a96a7c03bf645ad03b67985da572829462905bf6dfb2be8b105e2173e1bca4e6700658d862650fe31805aa8535e6d46025e6ad02e8609009eac843ab5a3047af620fa7dec0203bf7738f689a6e85278a225a6d0baf06805e499cf6f2ca1ff638382a51902d4158c823432fa44d1e52aded437789ee5d267000000"], 0xf0, 0x80}], 0x9, 0x0)

08:39:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1736.593553] binder: undelivered TRANSACTION_ERROR: 29201
08:39:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000140)=0xa28b)
fsetxattr$security_selinux(r1, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x2)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
ppoll(&(0x7f0000000080)=[{r1, 0x14c2}, {r1, 0x8}, {r1, 0x200}, {r1, 0x4000}, {r0, 0x8000}], 0x5, &(0x7f00000000c0), &(0x7f0000000100), 0x8)

08:39:44 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/mls\x00', 0x0, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000500)={0x3, 0xf, 0x4, 0x2100000, {0x0, 0x7530}, {0x0, 0x5, 0xdaa3, 0x53, 0xb6ff, 0x6, "93f76041"}, 0x8, 0x400000000000007, @userptr=0x7, 0x4})
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x10000}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0xfffffffffffffff9, 0x3}, &(0x7f0000000200)=0xc)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x102c9)

[ 1736.824848] binder: undelivered TRANSACTION_ERROR: 29201
08:39:44 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = socket$netlink(0x10, 0x3, 0x4)
accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6, &(0x7f0000000180)=0x80, 0x800)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)

[ 1737.033978] audit: type=1400 audit(1552120784.247:119): avc:  denied  { associate } for  pid=31668 comm="syz-executor.1" name="loop-control" dev="devtmpfs" ino=15905 scontext=system_u:object_r:net_conf_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
[ 1737.100913] binder: undelivered TRANSACTION_ERROR: 29201
08:39:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x1200}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:44 executing program 2:
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x300)
ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x8, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:44 executing program 1:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x4c80, 0xfffffffffffffffe)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000000)=0x3, 0x4)

08:39:44 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x8152b518058b61e)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:45 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x3}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180)=@v1={0x2, "51f601ddbe42999253b102ad2d4b953b"}, 0x11, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0xfffffffffffffffe)
r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x6e7, 0x4082)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000200)=0x6)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioprio_set$uid(0x3, r2, 0x9)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r3 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0x741140)
statx(r3, &(0x7f0000000440)='./file0/file0\x00', 0x400, 0xfff, &(0x7f0000000480))
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1737.685183] binder: undelivered TRANSACTION_ERROR: 29201
[ 1737.734981] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1737.734990] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1737.812764] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1737.812779] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1737.906044] binder_transaction: 2 callbacks suppressed
[ 1737.906060] binder: 31877:31879 transaction failed 29201/-28, size 0-8 line 3147
[ 1737.920629] binder: 31883:31907 ioctl c018620b 0 returned -14
[ 1737.973725] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1737.981578] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1737.990581] binder: 31883:31939 transaction failed 29201/-28, size 24-8 line 3147
08:39:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xa, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1738.053764] binder: undelivered TRANSACTION_ERROR: 29201
08:39:45 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x8001, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1738.266167] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:45 executing program 1:
capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffff})
syslog(0x0, 0x0, 0xffffffffffffffc7)

[ 1738.348819] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1738.463882] binder: 31996:31997 transaction failed 29201/-28, size 0-8 line 3147
08:39:45 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x2000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1738.633693] printk: syz-executor.1 (32085): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[ 1738.656225] binder: undelivered TRANSACTION_ERROR: 29201
08:39:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x12, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1738.849764] binder: undelivered TRANSACTION_ERROR: 29201
[ 1738.877695] binder: 32156:32197 ioctl c018620b 0 returned -14
08:39:46 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
listen(r1, 0x0)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept4$unix(r1, 0x0, 0x0, 0x0)

[ 1738.958034] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1738.992658] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:46 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
syz_execute_func(&(0x7f00000000c0)="65410f0fdbb065420f4e21f0438028c964660ffed3664b0f3a60cc00f04181544b2c76000000d8ebc4a2799034f4c483c15db50c000000f1c4a37d05db05")
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x200, 0x0)
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, 0x4000})
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffffffffffeab)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20000, 0x0)

[ 1739.002298] binder: 32156:32197 transaction failed 29201/-28, size 24-8 line 3147
[ 1739.014762] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1739.022971] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1739.032670] binder: 32212:32213 transaction failed 29201/-28, size 0-8 line 3147
[ 1739.095420] binder: undelivered TRANSACTION_ERROR: 29201
[ 1739.104676] binder: undelivered TRANSACTION_ERROR: 29201
08:39:46 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x100, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r1}}, 0xc)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x48, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:46 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x3f00}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:46 executing program 0:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x204440, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0xffffffffffffffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
timerfd_create(0x1, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x44000, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.upper\x00', &(0x7f0000000400)={0x0, 0xfb, 0xcb, 0x7, 0x4, "84ffe8ba56fdb89cfaa0805bd2824f3c", "0d11080301c8295d1ea69bdca4a7a4657f81ec2e759fefa2ebbac327d97e22826e98112d5995998f9c5416770716b5e6316aa64a1e310c142f707dfa9e774e680ee4f9fdea547f1ea3768428e9e69746095d39f4291e80cb67eb0160661613e92aa6a8d527b5b9adc98cddbcb73b7fb33216cf29b35805263e7813f4f0ff807e576942c9d4903c51e2e091cfca6b3535ddba5554c68e9da7708a1d6963f3d69e79a4d6f7961e10167bc8140100ca1bd8677e96d583b7"}, 0xcb, 0x3)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = getpgid(0xffffffffffffffff)
r4 = getpgid(r3)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x4, 0xfffffffffffffffa, 0x8, 0x7, 0x0, 0x9, 0x2000, 0x9, 0x1f, 0x1, 0x2, 0x1, 0x5, 0x1, 0x7, 0x2, 0x9, 0x6daa, 0x1000, 0x118, 0xfffffffffffffff7, 0x100000001, 0x5, 0x6, 0x6, 0x8, 0x4, 0x7, 0x6, 0x3f, 0x8, 0x1, 0x1, 0x5, 0x5, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x79, 0x480000000}, 0x2038, 0x96, 0xfffffffffffffffc, 0xb, 0xc5, 0x1, 0x3f}, r4, 0xf, r1, 0xb)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)

08:39:46 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101040, 0x0)
accept$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x200000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9)

[ 1739.206110] binder: 32307:32318 ioctl c018620b 0 returned -14
[ 1739.213950] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1739.246941] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:46 executing program 1:
r0 = socket$kcm(0x10, 0x200000000000003, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e000000110081aee405d10200000e00fa076b000800000000f3ff500befccd77f00000000081c5eda00b0eba06a", 0x2e}], 0x1}, 0x0)

[ 1739.319564] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1739.327999] binder: 32306:32317 transaction failed 29201/-28, size 0-8 line 3147
[ 1739.388072] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1739.462713] binder: 32307:32333 transaction failed 29201/-28, size 24-8 line 3147
[ 1739.475852] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'.
08:39:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4c, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:46 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0)

08:39:47 executing program 0:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x22080, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000080)=0x3)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x1f)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:47 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x80020011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xb)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

[ 1739.762554] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1739.797270] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1739.808258] binder: 32440:32442 transaction failed 29201/-28, size 0-8 line 3147
08:39:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x60, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:47 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4800}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1740.541968] binder: 32756:32757 ioctl c018620b 0 returned -14
08:39:47 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x800, 0x0)
recvfrom$rxrpc(r0, &(0x7f0000000180)=""/193, 0xc1, 0x20, &(0x7f0000000080)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:47 executing program 2:
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0)
fchdir(r0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:47 executing program 1:
mlockall(0x300000000001)
clone(0x10000008100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x1)

[ 1740.584062] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1740.591986] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1740.600963] binder: 32759:32760 transaction failed 29201/-28, size 0-8 line 3147
08:39:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x68, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1740.626488] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1740.656763] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:48 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x185c00, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x728, 0x20, 0xe, 0x40004000000, 0x10, 0x2a, 0x6, 0x7f, 0x8, 0xe3, 0x3ff, 0x3})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc)
prctl$PR_GET_THP_DISABLE(0x2a)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1740.675732] binder: 32756:32762 transaction failed 29201/-28, size 24-8 line 3147
08:39:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6c, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:48 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@rand_addr=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0x16)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4c00}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1741.525031] binder_release_work: 5 callbacks suppressed
[ 1741.525039] binder: undelivered TRANSACTION_ERROR: 29201
08:39:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x74, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:48 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
creat(&(0x7f0000000040)='./file0\x00', 0x100)

[ 1741.642981] binder: undelivered TRANSACTION_ERROR: 29201
[ 1741.654426] binder: 477:495 ioctl c018620b 0 returned -14
08:39:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7a, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1741.987639] binder: undelivered TRANSACTION_ERROR: 29201
08:39:49 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x3034c1, 0x0)
ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:49 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe442, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1742.086433] net_ratelimit: 24 callbacks suppressed
[ 1742.086440] protocol 88fb is buggy, dev hsr_slave_0
[ 1742.086474] protocol 88fb is buggy, dev hsr_slave_1
[ 1742.091444] protocol 88fb is buggy, dev hsr_slave_1
[ 1742.091514] protocol 88fb is buggy, dev hsr_slave_0
[ 1742.111658] protocol 88fb is buggy, dev hsr_slave_1
[ 1742.116809] protocol 88fb is buggy, dev hsr_slave_0
[ 1742.121885] protocol 88fb is buggy, dev hsr_slave_1
[ 1742.486442] protocol 88fb is buggy, dev hsr_slave_0
[ 1742.491573] protocol 88fb is buggy, dev hsr_slave_1
[ 1742.496702] protocol 88fb is buggy, dev hsr_slave_0
08:39:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1742.572239] binder: undelivered TRANSACTION_ERROR: 29201
[ 1742.599236] binder: undelivered TRANSACTION_ERROR: 29201
[ 1742.779850] binder: 639:640 ioctl c018620b 0 returned -14
[ 1742.840859] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1742.840868] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1742.866595] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1742.866609] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1742.913117] binder: undelivered TRANSACTION_ERROR: 29201
08:39:50 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x200, 0x0, 0x0, 0x0, 0x0)
syz_execute_func(&(0x7f0000000240)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e005f4a0fe2e3fada6388c16388c1c442019dccd319650f0fe2b7")
mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109)
r2 = dup2(r0, r1)
execve(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x841, 0x0)
clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x0, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0)

08:39:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x300, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x45, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4a}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9)

08:39:50 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r1, 0x204, 0x70bd27, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20008000)
r2 = open(&(0x7f0000000040)='./file0\x00', 0x109001, 0x24)
setsockopt$inet_dccp_int(r2, 0x21, 0x4, &(0x7f0000000080)=0x7, 0x4)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f00000005c0)=0x1)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000680)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dlm-control\x00', 0x404000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x3, 0x8, 0x5, 0x8, <r4=>0x0}, &(0x7f0000000200)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={r4, @in={{0x2, 0x4e24, @broadcast}}, 0x65f6, 0x2040000000000000, 0x800, 0x4, 0x8}, &(0x7f0000000400)=0x98)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000180)=0x2, 0x2)

08:39:50 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6800}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:50 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x1, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1743.012994] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1743.026226] binder: 746:753 ioctl c018620b 0 returned -14
[ 1743.076938] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1743.100447] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1743.110293] binder_transaction: 6 callbacks suppressed
[ 1743.110309] binder: 747:751 transaction failed 29201/-28, size 0-8 line 3147
[ 1743.123333] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1743.133088] binder: 746:760 transaction failed 29201/-28, size 24-8 line 3147
08:39:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x500, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1743.221778] binder: undelivered TRANSACTION_ERROR: 29201
08:39:50 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x101040, 0x0)
accept$nfc_llcp(r0, &(0x7f0000000180), &(0x7f0000000200)=0x60)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7, 0x200000)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000400)={0x16, 0x98, 0xfa00, {&(0x7f0000000280)={<r2=>0xffffffffffffffff}, 0x4, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}}, 0xa0)
write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000240), r2}}, 0x18)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0x9)

08:39:50 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1743.427913] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1743.498629] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1743.518771] binder: 803:854 transaction failed 29201/-28, size 0-8 line 3147
08:39:50 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, <r2=>0x0}, &(0x7f0000000680)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0xff, r1, r2}, {0x9, 0x9baf, 0x3, 0x6, 0x0, 0x7f, 0x80000001, 0x9}, {0xe7, 0x2, 0x5, 0x200}, 0xe580, 0x6e6bb5, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d4, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x3505, 0x5, 0x1, 0x5, 0xffffffffffff8001, 0x3}}, 0xe8)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180))
write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x600, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1743.553654] binder: undelivered TRANSACTION_ERROR: 29201
[ 1743.688056] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:51 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = getpgid(0x0)
perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x5, 0x1, 0x7f, 0x4, 0x0, 0x5, 0x20000, 0x2, 0x0, 0x3f, 0x4, 0x1, 0xfffffffffffffffd, 0x9, 0x8, 0x5f, 0x2, 0x0, 0x8000, 0x7b2, 0x1f, 0x101, 0x54e, 0x7, 0x2, 0x4, 0x4, 0xcb, 0x8, 0x800, 0x2, 0x0, 0x800, 0x3, 0x28d, 0x7f, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x8, 0x7fffffff, 0x0, 0x2, 0xffffffff9a0a1a3e, 0x4}, r2, 0x8, r0, 0xb)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:51 executing program 1:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x8152b518058b61e)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:51 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6c00}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:51 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@multicast1}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1743.898902] binder: undelivered TRANSACTION_ERROR: 29201
[ 1743.949245] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1744.058545] binder: 876:878 transaction failed 29201/-28, size 0-8 line 3147
[ 1744.179010] binder: undelivered TRANSACTION_ERROR: 29201
[ 1744.207609] binder: 885:900 ioctl c018620b 0 returned -14
08:39:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x700, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1744.378032] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1744.385784] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1744.416596] binder: 885:900 transaction failed 29201/-28, size 24-8 line 3147
[ 1744.741472] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1744.872632] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:52 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7400}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:52 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x60000, 0x0)
ioctl$RTC_AIE_OFF(r0, 0x7002)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1744.990009] binder: 913:931 transaction failed 29201/-28, size 0-8 line 3147
08:39:52 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = socket$netlink(0x10, 0x3, 0x4)
accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6, &(0x7f0000000180)=0x80, 0x800)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)

08:39:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xa00, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1745.167223] binder: 1021:1037 ioctl c018620b 0 returned -14
[ 1745.187546] QAT: Invalid ioctl
08:39:52 executing program 0:
recvmmsg(0xffffffffffffff9c, &(0x7f00000018c0)=[{{&(0x7f0000000240)=@generic, 0x80, &(0x7f0000000080)=[{&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/199, 0xc7}], 0x2, &(0x7f00000002c0)=""/21, 0x15}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/155, 0x9b}], 0x2}, 0x59}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001800)=""/137, 0x89}, 0x1ff}], 0x3, 0x40, &(0x7f0000001980))
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000002000)={'vcan0\x00', <r1=>0x0})
r2 = geteuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002040)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@loopback, 0x4e20, 0x1f, 0x4e24, 0x4, 0x0, 0xa0, 0x0, 0x3f, r1, r2}, {0xffffffff, 0x5, 0x100, 0xa203, 0x5, 0x3, 0x5}, {0x5b9a2d93, 0xaac, 0x1, 0x7}, 0x3ff, 0x6e6bbd, 0x3, 0x0, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0xa, @in6=@mcast1, 0x3503, 0xf63ccea67207478f, 0x1, 0x9, 0x15d9, 0xed, 0xffff}}, 0xe8)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x60, {{0x2, 0x4e22, @multicast1}}}, 0x88)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xfffffffffffffe2c)

[ 1745.241729] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1745.266428] QAT: Invalid ioctl
[ 1745.286934] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1745.306590] binder: 1021:1119 transaction failed 29201/-28, size 24-8 line 3147
08:39:52 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe43d, 0xfffffffffffffffd)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0xc0, 0x0)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080))

08:39:53 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0xe440, 0x402000)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9)

08:39:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x1200, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:53 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = socket$netlink(0x10, 0x3, 0x4)
accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6, &(0x7f0000000180)=0x80, 0x800)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)

08:39:53 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7a00}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:53 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200000, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000080)=0xff, 0x4)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ustat(0xe0, &(0x7f0000000180))

[ 1746.058860] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1746.107687] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1746.147217] binder: 1345:1348 transaction failed 29201/-28, size 0-8 line 3147
08:39:53 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000080)={0x1, 0xffffffffffffff9c})

[ 1746.256794] binder: 1354:1371 ioctl c018620b 0 returned -14
[ 1746.345931] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1746.473684] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:53 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x3}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x2000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1746.630439] binder: 1354:1371 transaction failed 29201/-28, size 24-8 line 3147
[ 1746.638153] binder_release_work: 3 callbacks suppressed
[ 1746.638160] binder: undelivered TRANSACTION_ERROR: 29201
[ 1747.334706] binder: 1483:1518 transaction failed 29201/-28, size 0-8 line 3147
08:39:54 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x1000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1747.406107] binder: undelivered TRANSACTION_ERROR: 29201
08:39:54 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = socket$netlink(0x10, 0x3, 0x4)
accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6, &(0x7f0000000180)=0x80, 0x800)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)

08:39:54 executing program 5:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x50000, 0x0)
statx(r0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x3f00, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1747.603643] binder: undelivered TRANSACTION_ERROR: 29201
[ 1747.615172] binder: 1590:1604 ioctl c018620b 0 returned -14
08:39:54 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$ppp(r0, &(0x7f0000000180)="5eb940a9b64b54b27e8b543bb721a1726dad90e0838deb6e3816ce9dbb40fccb028717c12bb75be728927fcf983e53dbcce2b65e3d85950a06a70687e4c1414c3de7547df62062f8be58eca251411ceaace1b087bc23168bb28f163b2b6a6ad29db84bcdb01a64639537426688097e40b9bf9705178471fd7a589071204b58803ee40a7e5e2ee470f7c311d622978f94a237454e98dfb4666662dfdc1500b338eef45121790eb9d1756ec7864625822596077229280f196a1a224039eef030aa3b52b54efe0f152945b19f65061ec9d0de2c81e5a6b5022228a572", 0xdb)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1747.720194] binder: undelivered TRANSACTION_ERROR: 29201
[ 1748.018036] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1748.018046] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1748.031865] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1748.031880] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:55 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x10a00, 0x132)
ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x4, 0x6, 0x400})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1748.065513] binder: undelivered TRANSACTION_ERROR: 29201
08:39:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4800, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1748.326473] net_ratelimit: 24 callbacks suppressed
[ 1748.326481] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.336423] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.336557] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.341479] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.346526] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.356511] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.361589] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.366662] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.451934] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:55 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x2000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1748.496778] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1748.521351] binder: undelivered TRANSACTION_ERROR: 29201
[ 1748.537631] binder_transaction: 3 callbacks suppressed
08:39:55 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={<r1=>0x0, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x4, [0x95ff000000000, 0x7ff, 0x5, 0x1ff]}, &(0x7f0000000280)=0x10)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x141001)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40, 0x0)

[ 1748.537647] binder: 1816:1821 transaction failed 29201/-28, size 0-8 line 3147
08:39:55 executing program 1:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000600)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, <r2=>0x0}, &(0x7f0000000680)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e20, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0xff, r1, r2}, {0x9, 0x9baf, 0x3, 0x6, 0x0, 0x7f, 0x80000001, 0x9}, {0xe7, 0x2, 0x5, 0x200}, 0xe580, 0x6e6bb5, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d4, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x25}, 0x3505, 0x5, 0x1, 0x5, 0xffffffffffff8001, 0x3}}, 0xe8)
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000000080))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000180))
write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1748.603561] binder: 1868:1911 ioctl c018620b 0 returned -14
[ 1748.664425] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:39:56 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
read$FUSE(r0, 0x0, 0x0)
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x4000)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000200)={0x0, r1})
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000001c0)=0x80000000, 0x4)

[ 1748.726734] protocol 88fb is buggy, dev hsr_slave_0
[ 1748.732600] protocol 88fb is buggy, dev hsr_slave_1
[ 1748.748767] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4c00, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1748.776987] binder: undelivered TRANSACTION_ERROR: 29201
[ 1748.923369] binder: 1868:1929 transaction failed 29201/-28, size 24-8 line 3147
[ 1749.128840] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1749.151513] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1749.162708] binder: 1935:1988 transaction failed 29201/-28, size 0-8 line 3147
08:39:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1749.230709] binder: undelivered TRANSACTION_ERROR: 29201
08:39:56 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00')
syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0xfffb, 0x0)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)
getsockname$netlink(r1, &(0x7f0000000200), &(0x7f0000000240)=0xc)
ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000180)={0x4, "97e6d6866b3887564639e23efd372f97eb8271a535f7b03330213440a5789ab1", 0x3, 0x1, 0x2, 0x4, 0x4, 0x3, 0x1, 0x20})

08:39:56 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x9)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={<r2=>0xffffffffffffff9c})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)

[ 1749.389179] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:56 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x3000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1749.448669] binder: undelivered TRANSACTION_ERROR: 29201
[ 1749.572447] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:56 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={<r1=>0x0, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x4, [0x95ff000000000, 0x7ff, 0x5, 0x1ff]}, &(0x7f0000000280)=0x10)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x141001)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40, 0x0)

[ 1749.614245] binder: 2141:2142 transaction failed 29201/-28, size 0-8 line 3147
08:39:57 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000500)='/dev/vbi#\x00', 0x1, 0x2)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008010)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1749.721737] binder: 2162:2182 ioctl c018620b 0 returned -14
08:39:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6800, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1749.774164] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1749.812982] binder: undelivered TRANSACTION_ERROR: 29201
[ 1749.905372] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1749.960531] binder: 2162:2182 transaction failed 29201/-28, size 24-8 line 3147
[ 1750.170633] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:39:57 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1750.213562] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1750.222580] binder: 2308:2382 transaction failed 29201/-28, size 0-8 line 3147
08:39:57 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe43c, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6c00, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1750.454762] binder: 2431:2466 ioctl c018620b 0 returned -14
08:39:57 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0x0, @empty, 0x6e0}}, {{0xa, 0x4e21, 0x3, @remote, 0x5}}}, 0x108)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x4, 0x5, 0x6, 0x6})
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1750.534154] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1750.651411] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1750.744670] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1750.755059] binder: 2431:2466 transaction failed 29201/-28, size 24-8 line 3147
[ 1750.794161] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:39:58 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x5000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1750.860066] binder: 2472:2479 transaction failed 29201/-28, size 0-8 line 3147
08:39:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7400, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:58 executing program 0:
openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
mount$9p_virtio(&(0x7f00000000c0)='\x1c\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x4, &(0x7f0000000280)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@version_L='version=9p2000.L'}], [{@pcr={'pcr', 0x3d, 0x30}}]}})
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)

08:39:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={<r1=>0x0, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x4, [0x95ff000000000, 0x7ff, 0x5, 0x1ff]}, &(0x7f0000000280)=0x10)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x141001)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40, 0x0)

[ 1750.972060] binder: 2591:2592 ioctl c018620b 0 returned -14
08:39:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7a00, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1751.024650] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1751.032699] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1751.042392] binder: 2593:2595 transaction failed 29201/-28, size 0-8 line 3147
[ 1751.046657] binder: 2591:2597 transaction failed 29201/-28, size 24-8 line 3147
08:39:58 executing program 5:
statx(0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0xfff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = fcntl$dupfd(r0, 0x406, r1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in=@local, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x84, r3, r4}, {0x200, 0x6, 0x1000, 0x8000, 0x286, 0x3, 0xc2a, 0x9}, {0x8001, 0xf0bb, 0x20, 0x80000001}, 0x8, 0x6e6bbb, 0x2, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d4}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3507, 0x3, 0x3, 0xfffffffffffffffb, 0x13cb9e34, 0x200, 0x9}}, 0xe8)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x2000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:58 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:39:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x3000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:58 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000001c0)={<r1=>0x0, 0x3}, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={r1, 0x7, 0x4, [0x95ff000000000, 0x7ff, 0x5, 0x1ff]}, &(0x7f0000000280)=0x10)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x141001)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x40, 0x0)

08:39:58 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40000, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000080)=[0x4, 0x6fd33010])
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffb)
keyctl$revoke(0x3, r4)
dup3(r2, r1, 0x80000)

[ 1751.689491] binder_release_work: 8 callbacks suppressed
[ 1751.689499] binder: undelivered TRANSACTION_ERROR: 29201
08:39:59 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:39:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:39:59 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x44001)
prctl$PR_GET_NAME(0x10, &(0x7f0000000180)=""/123)
ioctl$UI_DEV_DESTROY(r1, 0x5502)

08:39:59 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x2000000000203ffd, 0x8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0)

[ 1752.176025] binder: undelivered TRANSACTION_ERROR: 29201
08:39:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x5000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1752.335424] binder: undelivered TRANSACTION_ERROR: 29201
08:39:59 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x20201, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xf, {0xffff, 0x5, 0xed0, 0x100}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1752.543060] binder: 3107:3179 ioctl c018620b 0 returned -14
08:39:59 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1752.661134] vivid-003: =================  START STATUS  =================
08:40:00 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)="d413634392939641bfd520c847eb89a3c4096e74d1308cf2ab2a0e9f0e40b9144258213a40100ed20658f90715e77a5151647723a6ae040cb406a7101089f196a0a3f45515bd683c4c76a6cf88be9ab7ae007b0bf3f29ce102864b8d56a0cfae72f4bd296bf71443c911a502b08ed2f1a74cd1d177e6d20444c9c442bb6803832f23991318cc6bb06102b75613a859bc7b4de14de5cef8b4c6fa0732134822063f7ab7377c4dbb40f892667c543a2402fde4f37c1ce7119b1926b92104f3c7b6534acf13f36e5bbc339547c399b91671fc548bd5f2f4591803eb56d13a1fec36bf08f9f1f02ebbcb7d", 0xe9, 0xfffffffffffffffa)
keyctl$read(0xb, r0, &(0x7f0000000280)=""/70, 0x46)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$binfmt_elf64(r1, &(0x7f0000000440)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x8, 0x96, 0x10000, 0x2, 0x3, 0x3e, 0x6, 0x2ca, 0x40, 0x370, 0x7, 0x40, 0x38, 0x2, 0x3c, 0x5, 0xd000}, [{0x0, 0x8000, 0x4, 0x800, 0x9, 0x8ee, 0x3, 0xfffffffffffffffb}, {0x6, 0x7fff, 0x80000000, 0x96d, 0xd288, 0x7fffffff, 0x2, 0x4}], "d87ed8e10e2ebfdee8665557c1ca4ee6ec53dce696caba01266cea79a456039f6316283fe786202941f89c3bb9cdb3f6c06c756266430ddfe813b91e7ecf909e2aabdd636f54dbc66f05efbdc63bc4e2b35bcdabbacc86967c94fa02dd1a6feb95581bf38c0571c0c46746158d079df26646b6f49f9d77e9d31cdd5191e0495754b1a11cdebc644d3f274b387c77cbd10131777116a4f43ceff258f7a4af8aecb32a6761e18596cf4d4f9dbe46789585b9899d887c3a0e4a7b5a8dca2662c73f75735486874d46b55b28705a25a04d6dc0da16522704dbc5b50c32c0bee4c7772787a46386fcccfb", [[], [], [], [], [], [], []]}, 0x898)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cachefiles\x00', 0x2, 0x0)
ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x5)

08:40:00 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1752.743511] vivid-003: RDS Tx I/O Mode: Controls
[ 1752.772832] binder: undelivered TRANSACTION_ERROR: 29201
[ 1752.784910] vivid-003: RDS Program ID: 32904
[ 1752.857989] vivid-003: RDS Program Type: 3
08:40:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1752.924152] binder: undelivered TRANSACTION_ERROR: 29201
[ 1752.966474] vivid-003: RDS PS Name: VIVID-TX
[ 1753.298201] binder: 3211:3269 ioctl c018620b 0 returned -14
[ 1753.385656] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[ 1753.409101] vivid-003: RDS Stereo: true
[ 1753.413533] vivid-003: RDS Artificial Head: false
[ 1753.425328] vivid-003: RDS Compressed: false
[ 1753.431281] vivid-003: RDS Dynamic PTY: false
[ 1753.436225] vivid-003: RDS Traffic Announcement: false
[ 1753.451310] vivid-003: RDS Traffic Program: true
[ 1753.460930] vivid-003: RDS Music: true
[ 1753.473461] vivid-003: ==================  END STATUS  ==================
08:40:00 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1753.492489] binder_alloc_new_buf_locked: 8 callbacks suppressed
[ 1753.492498] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1753.506743] binder_alloc_new_buf_locked: 8 callbacks suppressed
[ 1753.506753] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1753.523566] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1753.531932] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:00 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
close(r0)

[ 1753.604087] binder: undelivered TRANSACTION_ERROR: 29201
08:40:01 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100}, {0x0, 0x0, 0x7}}, {{@in=@dev, 0x400000000}, 0x0, @in=@dev}}, 0xe8)
ioctl$int_out(r0, 0x5462, &(0x7f0000000040))
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
setns(r0, 0x46000000)
prctl$PR_MCE_KILL_GET(0x22)

[ 1753.687093] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1753.696174] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1753.711810] binder_transaction: 9 callbacks suppressed
[ 1753.711825] binder: 3539:3543 transaction failed 29201/-28, size 0-8 line 3147
08:40:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x8000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:01 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x20201, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xf, {0xffff, 0x5, 0xed0, 0x100}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1753.745971] binder: undelivered TRANSACTION_ERROR: 29201
08:40:01 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x109000, 0x0)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x4e20, 0x1, @loopback, 0xd755}}, {{0xa, 0x4e20, 0x7, @mcast1, 0x2}}}, 0x108)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000580)={0x1, r0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000004c0)={0x4, 0xfffffffffffffc01, 0x8000, 'queue0\x00', 0xd8})
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="00934dd9ca39428dfc00d3bb8d99d12008919a0d252aadac9fe8a20a1be6563a0a58730b015cca010b7060", @ANYRES16=r3, @ANYBLOB="220129bd7000fcdbdf25160000001400020008000100575a0000080002000800000000000000080001000100ffff"], 0x3}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x702, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x880}, 0xc1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x91f8)

08:40:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xa000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1754.315660] binder: undelivered TRANSACTION_ERROR: 29201
[ 1754.387721] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1754.395415] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1754.410520] vivid-003: =================  START STATUS  =================
[ 1754.440278] binder: 3637:3732 ioctl c018620b 0 returned -14
[ 1754.458455] Unknown ioctl 1074310944
[ 1754.473037] vivid-003: RDS Tx I/O Mode: Controls
[ 1754.479184] Unknown ioctl -1064545484
[ 1754.505090] vivid-003: RDS Program ID: 32904
[ 1754.513806] vivid-003: RDS Program Type: 3
[ 1754.522421] vivid-003: RDS PS Name: VIVID-TX
[ 1754.531723] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[ 1754.546133] vivid-003: RDS Stereo: true
[ 1754.554753] vivid-003: RDS Artificial Head: false
[ 1754.564432] vivid-003: RDS Compressed: false
[ 1754.569081] net_ratelimit: 26 callbacks suppressed
[ 1754.569088] protocol 88fb is buggy, dev hsr_slave_0
[ 1754.569148] protocol 88fb is buggy, dev hsr_slave_1
[ 1754.576432] protocol 88fb is buggy, dev hsr_slave_0
[ 1754.585484] binder: 3580:3622 transaction failed 29201/-28, size 0-8 line 3147
[ 1754.589892] protocol 88fb is buggy, dev hsr_slave_1
08:40:01 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x141000, 0x0)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x3)

[ 1754.589969] protocol 88fb is buggy, dev hsr_slave_0
[ 1754.597481] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1754.602366] protocol 88fb is buggy, dev hsr_slave_1
[ 1754.616235] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1754.620221] protocol 88fb is buggy, dev hsr_slave_0
[ 1754.620257] protocol 88fb is buggy, dev hsr_slave_1
[ 1754.638250] vivid-003: RDS Dynamic PTY: false
[ 1754.698241] vivid-003: RDS Traffic Announcement: false
[ 1754.721933] binder: 3637:3732 transaction failed 29201/-28, size 24-8 line 3147
[ 1754.743299] vivid-003: RDS Traffic Program: true
08:40:02 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)

08:40:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xa000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1754.760921] binder: undelivered TRANSACTION_ERROR: 29201
[ 1754.811765] vivid-003: RDS Music: true
[ 1754.848619] Unknown ioctl 1074310944
[ 1754.852572] vivid-003: ==================  END STATUS  ==================
[ 1754.872196] Unknown ioctl -1064545484
08:40:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x12000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1754.913348] binder: undelivered TRANSACTION_ERROR: 29201
[ 1754.924957] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1754.934141] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1754.944552] binder: 3822:3867 transaction failed 29201/-28, size 0-8 line 3147
08:40:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x12000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1754.966460] protocol 88fb is buggy, dev hsr_slave_0
[ 1754.971545] protocol 88fb is buggy, dev hsr_slave_1
[ 1755.020146] binder: 3987:3988 ioctl c018620b 0 returned -14
08:40:02 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3a0, 0x8000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x28, &(0x7f00000000c0)}, 0x10)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x40000, 0x4)
write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x9)

[ 1755.073195] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1755.089680] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1755.100691] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1755.106759] binder: 3987:3991 transaction failed 29201/-28, size 24-8 line 3147
08:40:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x20000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1755.112644] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1755.127798] binder: 3990:3992 transaction failed 29201/-28, size 0-8 line 3147
08:40:02 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)=']*/&{)user.\x00', 0xfffffffffffffffa)
r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000400)="4d86e128596f2709f80a496d4fb71457330a699fe20fcca7588fcfa3b16571f236a30d8fd3431d5d2d7e9e80d273ae7b16d3b0af58bb708543f76301cabb07d101af98343ceef8e802512e7f59f879c5d1e75305caa19d71961d410ff1315b3cd31e7f2ab1a4ed40f1fe2ed5e0063516817cefeccabaf849d5b62db39ca167848f21", 0x82, 0xffffffffffffffff)
r3 = request_key(&(0x7f0000000140)='blacklist\x00', &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)='trustedlo!\x00', 0xfffffffffffffff9)
keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r2, r3}, &(0x7f0000000580)=""/103, 0x67, &(0x7f0000000740)={&(0x7f0000000600)={'sha1-generic\x00'}, &(0x7f0000000640)="c63346b8a80661123fe96c33b6bd970266ce9f2f64b7ed9256f4a395451d3921748f314ef9a2e676e2b6a3fdcfd9461560d42ab5be3400a57cdadf399dba477c744fa9f8e6eb7842c5a78aa835a523f17f05017d9a67871485f04ecd8abde3837ffd523ffd6363f9eb624011ff42000a5d71ca8067a59bf5a82c8dea2afbf7acc040960c0e5267d8880c69a6343bedf189273637a50225e06c68bd266a087491dbc5ea5c40c9be9d0f84ef3d3ec0f0ed588bb78bc76e98f0672741871d8a8cd086c6f6b7a8b9373687aeea53b8ae0d3ab19c4c234627e4cad5864a52b97c0771ad6aaf48a95d07b54794c183ea1fd837e4c90f0a3052", 0xf6})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000980)='/selinux/enforce\x00', 0x0, 0x0)
ioctl$VIDIOC_S_PARM(r4, 0xc0cc5616, &(0x7f00000009c0)={0x6, @capture={0x1000, 0x1, {0x40, 0x1}, 0x1, 0x5}})
r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0)
ioctl$VIDIOC_G_PARM(r5, 0xc0cc5615, &(0x7f0000000800)={0xb, @capture={0x1000, 0x0, {0x8}, 0xff, 0x200000}})
r6 = socket(0x1d, 0xf, 0x1643c9a2)
r7 = eventfd2(0x80000000, 0x80001)
accept4$bt_l2cap(r6, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0)
r8 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x6, 0x0)
ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000940)={0x5000, &(0x7f0000000900), 0x3, r7, 0x4})

08:40:02 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x20201, 0x0)
ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000180)={0xf, {0xffff, 0x5, 0xed0, 0x100}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2)
ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x3f000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1755.224208] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1755.235003] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1755.244540] binder: 3997:3999 transaction failed 29201/-28, size 0-8 line 3147
[ 1755.349545] vivid-003: =================  START STATUS  =================
[ 1755.357146] vivid-003: RDS Tx I/O Mode: Controls
[ 1755.362910] vivid-003: RDS Program ID: 32904
[ 1755.370297] vivid-003: RDS Program Type: 3
[ 1755.375417] vivid-003: RDS PS Name: VIVID-TX
[ 1755.386611] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:02 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000180)={0x3, 0xfff, [{0xf4a0}, {0x7, 0x0, 0x1ff}, {0x9e75, 0x0, 0x2}]})
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1755.394315] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1755.397180] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will
[ 1755.409136] binder: 4040:4100 transaction failed 29201/-28, size 0-8 line 3147
[ 1755.419588] vivid-003: RDS Stereo: true
[ 1755.425242] vivid-003: RDS Artificial Head: false
[ 1755.441440] vivid-003: RDS Compressed: false
08:40:02 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0)
ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1d8)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x97, 0x5, 0x7ff})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1755.461843] vivid-003: RDS Dynamic PTY: false
[ 1755.481867] vivid-003: RDS Traffic Announcement: false
08:40:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x40000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1755.503199] vivid-003: RDS Traffic Program: true
[ 1755.538003] vivid-003: RDS Music: true
[ 1755.573280] vivid-003: ==================  END STATUS  ==================
08:40:02 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x30000)
syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x8, 0x101800)
r2 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
write$cgroup_type(r2, &(0x7f0000000240)='threaded\x00', 0x9)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000040)=0x6)
ioctl$RTC_PIE_OFF(r0, 0x7006)

[ 1755.654329] binder: 4296:4326 transaction failed 29201/-28, size 0-8 line 3147
08:40:03 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000400)={{0x3, 0x7, 0x3, 0x1ff, 'syz0\x00'}, 0x1, [0x3f, 0xfffffffffffffeff, 0x2933, 0x3, 0x9, 0x0, 0x6, 0x8, 0x2, 0x100000000, 0x1800, 0x3, 0x4, 0x9, 0x8, 0x401, 0x5b4, 0x10001, 0x401, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x8001, 0xff, 0x5, 0x254, 0x8df, 0x19b, 0x10001, 0xd32, 0x8, 0x5, 0x7, 0x5, 0x101, 0x8, 0x6, 0x8, 0x4, 0x7, 0x2, 0x73, 0x0, 0x1000, 0x40, 0x9, 0x6, 0x7, 0x1, 0x8e, 0x0, 0xffff, 0xffff, 0xfffffffffffffffc, 0x80000000, 0xfffffffffffff557, 0x12, 0x8, 0x3ff, 0x8255, 0x57b, 0x7, 0x9, 0x7, 0x8, 0x465, 0x8, 0x1, 0x4, 0x8, 0xff, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x7, 0x5, 0x1, 0x1000, 0x1, 0x6, 0x1, 0xffffffffffffffff, 0x401, 0x9, 0xfffffffffffff7ba, 0xbec, 0x1000, 0x42, 0xe637, 0x80000000, 0xffff, 0xee9, 0x0, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x3f, 0x9, 0x1f71, 0xfffffffffffffff9, 0x100, 0x80000001, 0x1, 0x6, 0x3, 0x9, 0x5, 0x10001, 0x9, 0x7, 0x800, 0x6, 0x1, 0x8001, 0x80000000, 0x5, 0x2, 0x7ff, 0x7, 0x0, 0x21], {0x77359400}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:03 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x20000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x48000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:03 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x28000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080))
ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/193)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:03 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0)
ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080))
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1756.054479] binder: 4426:4429 ioctl c018620b 0 returned -14
[ 1756.119808] binder: 4426:4476 transaction failed 29201/-28, size 24-8 line 3147
08:40:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4c000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:03 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0x1f, 0x2, 0x9, 0x2, 0x3, 0x178b, 0x2ce, 0x38, 0x340, 0x5, 0x4, 0x20, 0x1, 0x0, 0x9, 0xfaa}, [{0x6474e551, 0x4, 0x2, 0x1, 0x0, 0x3, 0x1, 0x4}, {0x70000007, 0x29, 0x7f, 0x1, 0x1f, 0x8000, 0x6, 0xfffffffffffffffe}], "1a5efcd54eb99a823087537be489b4bf0a27fa2f5c1935381372609c29ad8f3486f1ab5acf23721cddc7c879dd710b80d0f1acf323305ba0a974f41fac0bf0c6351ff12ef2dac70c5c", [[], [], [], [], [], [], [], [], []]}, 0x9c1)
getsockname(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff}}, &(0x7f0000000080)=0x80)
setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e23, 0xffffffffffffff7f, @mcast2, 0xfffffffffffffff8}, {0xa, 0x4e23, 0x60d2, @rand_addr="e5058ccf04b7d18b3851545a1fb88b77"}, 0x4, [0xffff, 0x1, 0x3f, 0x4, 0xfffffffffffffffb, 0x8, 0xffff, 0x1000]}, 0x5c)
ioctl$TCSBRKP(r1, 0x5425, 0x9)
r2 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000040)=0x3b)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e80)={<r4=>0xffffffffffffffff, r2, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000e00)={0x1, 0x70, 0x1650, 0x7, 0x4, 0x2, 0x0, 0x1, 0x1820, 0xa, 0x8, 0x2, 0x9, 0x80000001, 0x1e8a, 0x6, 0x3, 0x7fffffff, 0x3, 0x7, 0xb0, 0x5e, 0x9, 0x3, 0x7, 0x630e, 0x100, 0x80, 0x8, 0x9, 0x9, 0xd7d, 0x1, 0x7, 0xad2, 0x749, 0x40, 0x6, 0x0, 0x6, 0x5, @perf_config_ext={0x9}, 0x2, 0x80, 0x8001, 0xf, 0x1, 0x5, 0x8}, r4, 0x3, r0, 0x2)

08:40:03 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
write$P9_RLOCK(r0, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000400)={{0x3, 0x7, 0x3, 0x1ff, 'syz0\x00'}, 0x1, [0x3f, 0xfffffffffffffeff, 0x2933, 0x3, 0x9, 0x0, 0x6, 0x8, 0x2, 0x100000000, 0x1800, 0x3, 0x4, 0x9, 0x8, 0x401, 0x5b4, 0x10001, 0x401, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x8001, 0xff, 0x5, 0x254, 0x8df, 0x19b, 0x10001, 0xd32, 0x8, 0x5, 0x7, 0x5, 0x101, 0x8, 0x6, 0x8, 0x4, 0x7, 0x2, 0x73, 0x0, 0x1000, 0x40, 0x9, 0x6, 0x7, 0x1, 0x8e, 0x0, 0xffff, 0xffff, 0xfffffffffffffffc, 0x80000000, 0xfffffffffffff557, 0x12, 0x8, 0x3ff, 0x8255, 0x57b, 0x7, 0x9, 0x7, 0x8, 0x465, 0x8, 0x1, 0x4, 0x8, 0xff, 0x9, 0x1, 0x0, 0x7, 0x80000001, 0x7, 0x5, 0x1, 0x1000, 0x1, 0x6, 0x1, 0xffffffffffffffff, 0x401, 0x9, 0xfffffffffffff7ba, 0xbec, 0x1000, 0x42, 0xe637, 0x80000000, 0xffff, 0xee9, 0x0, 0x1, 0x0, 0x9, 0x80000000, 0x6, 0x3f, 0x9, 0x1f71, 0xfffffffffffffff9, 0x100, 0x80000001, 0x1, 0x6, 0x3, 0x9, 0x5, 0x10001, 0x9, 0x7, 0x800, 0x6, 0x1, 0x8001, 0x80000000, 0x5, 0x2, 0x7ff, 0x7, 0x0, 0x21], {0x77359400}})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1756.809542] binder_release_work: 7 callbacks suppressed
[ 1756.809550] binder: undelivered TRANSACTION_ERROR: 29201
08:40:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x60000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0)
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4)
write$cgroup_type(r0, &(0x7f0000000240)='threaded\x00', 0x221)

08:40:04 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = fcntl$dupfd(r0, 0x0, r1)
setsockopt$inet6_dccp_int(r2, 0x21, 0x4, &(0x7f0000000180)=0xbbbd, 0x4)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x220180, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000080)={0x86a, 0x303a7e5b, 0xff, 0xffff, 0x3, @stepwise={{0x7fffffff, 0x1}, {0x101, 0x3f}, {0x5c, 0x7}}})
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:04 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x3f000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1757.196476] binder: undelivered TRANSACTION_ERROR: 29201
08:40:04 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}, {}, {}, 0xffff}, {{@in6=@loopback}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800000}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
pipe2(&(0x7f0000000040), 0x84000)

[ 1757.465838] binder: 4754:4755 ioctl c018620b 0 returned -14
08:40:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x68000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1757.579397] binder: undelivered TRANSACTION_ERROR: 29201
08:40:05 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x80000)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080))
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)

08:40:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6c000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1758.169402] binder: undelivered TRANSACTION_ERROR: 29201
08:40:05 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x81, 0x2000)
r1 = gettid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000400)={{0x1, 0x4, 0x6, 0x0, 'syz1\x00', 0x800}, 0x0, 0x30, 0x6, r1, 0x0, 0x9f, 'syz0\x00', &(0x7f0000000240), 0x0, [], [0x0, 0x400, 0x1, 0xfffffffffffffffd]})
openat$capi20(0xffffffffffffff9c, &(0x7f0000000540)='/dev/capi20\x00', 0x0, 0x0)
write$P9_RLOCK(r0, &(0x7f0000000240)={0x8, 0x35, 0x1, 0x60d9a82e3ae1144f}, 0x8)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000640)={0x8, 0x9, 0x2000012000001, 0x2000003fd})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x88000)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000580)='./file0\x00', 0x1, 0x5, &(0x7f0000000940)=[{&(0x7f0000000680)="7a57c16ee8f242b808cdc9e668525b5b3cdee239d0027056755451a12572475595129862559cba35ee53a15ce0b4a6c7c35718312ece8c912ff553e8ca8eece7b9ef4f4d2ab2540d1489bec0615fd9bc8aafc7ec2445b717d1085dbd25d8f15f6383f0f66d72152e13ecaf7ed092c7625e73cfaf55edc015755a0603533b146970a429b4b18af99b5da3fbcf96443dba290e1118ab72ca21133121183f43ff3a4c2471fc51c6c5e2f15466a2644d4feaadc7", 0xb2, 0x389fda4a}, {&(0x7f00000005c0)="062821f5af0c1790f6b64a48454a8102dc1abf2a58ade8e19c4c12806ff9095b2ec053775dbcff675f2aab6875d3e649488d58b96fb84b2a98d41daffc01a34e40e620c40951193ac155a1b90ba873d6f33f7a8564aa61c05413bb8d74c12c56bca1515dddce9f", 0x67, 0x8}, {&(0x7f0000000740)="3011e8b0f60b2e02beb05ebd52cff80d4c34259fa382d225348babc2cb7896f58258a861f11434dceb9875f5ca6734c95010e4f4be8d0350eb46e08036628b77fafdfa1002c300f8a150ae59d50404f0364e464fc5ef12ea935a408075d6fecab1284c3a0609cd0e511e2aeddab734aa06499ee1d82c413d12081f449a181730ac4bf5b81ab39aec4875f01092d47435", 0x90, 0x4}, {&(0x7f0000000800)="9b2e088fd9b0450d39d9551b3a3a5924b0413a40cf914eeb95afde62edd394f080aa2c3271a8c84dc4b0207e544599aad5491dcbf3d736e883903885b1e0425d3a633df10589680e55862e87f6d2cfc14e129423e58975cd79af508e361275d9", 0x60, 0x10001}, {&(0x7f0000000880)="e54f1bd39986a0a84dbf553af7522589ff21210bb51792cf42ba286d185ce36192eec9e53ad92b37edc4e947108ca8bfbd99445adc48d6a3c5deda2efd98311b32a36c3f309d6f3d21eeb636f58ab32d9d6d4450a5155b634e3d0be34829a660d0ebf50d131c08441861e7d1af6a29e795401434f4f6581a39047238026375f40b65235a6b88f42d6158c03616a376d556843d541b9da39159", 0x99, 0x383}], 0x40000, &(0x7f0000000a80)={[{@errors_withdraw='errors=withdraw'}, {@quota_quantum={'quota_quantum', 0x3d, 0x3fe2}}, {@acl='acl'}, {@locktable={'locktable', 0x3d, '/dev/amidi#\x00'}}, {@nodiscard='nodiscard'}], [{@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@measure='measure'}, {@uid_lt={'uid<', r4}}]})
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x40000, 0x0)
ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000180)={'bond_slave_0\x00', 0xfffffffffffffffa})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev, 0x3506}}, 0xe8)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400082, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r5, &(0x7f0000000280)='threaded\x00', 0x1000001df)

08:40:05 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x48000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1758.348712] binder: undelivered TRANSACTION_ERROR: 29201
08:40:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x74000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1758.499542] binder: undelivered TRANSACTION_ERROR: 29201
[ 1758.572647] binder: 5087:5088 ioctl c018620b 0 returned -14
[ 1758.647055] binder_alloc_new_buf_locked: 8 callbacks suppressed
[ 1758.647066] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:06 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x808000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x100, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}}, 0x4040000)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x4288, 0x161100)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0)
write$eventfd(r4, &(0x7f00000002c0)=0x5, 0x8)
statx(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x40, &(0x7f00000001c0))
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1758.691588] binder_alloc_new_buf_locked: 8 callbacks suppressed
[ 1758.691603] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:06 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1f9502, 0x0)
r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0)='NET_DM\x00')
sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20904000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1758.879228] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1758.892101] binder_transaction: 6 callbacks suppressed
[ 1758.892118] binder: 5087:5088 transaction failed 29201/-28, size 24-8 line 3147
[ 1758.921693] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:06 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x80000)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080))
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)

[ 1759.040886] binder: 5089:5092 transaction failed 29201/-28, size 0-8 line 3147
08:40:06 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4c000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:06 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x22bdada6b2acc55b}, {0x0, 0x0, 0x200000000}, {0x0, 0x0, 0x2}}, {{@in=@dev, 0x0, 0x8e86fb6e5aead822}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f00000001c0)={0x92, [0x0, 0x3, 0x20e800, 0x0, 0x2, 0x5, 0x7ff, 0x100000000, 0x3ff, 0x6, 0xfffffffffffffff9, 0xf5, 0xffff, 0x1, 0x3, 0x8001, 0x7f, 0x5, 0x8, 0x6, 0x100, 0x3, 0xfff, 0x1, 0x20, 0x7, 0x8, 0x19b4, 0x3, 0xdfb, 0x8, 0x37f, 0x938e, 0x245, 0x8, 0x7f, 0x2, 0x9, 0x7ff, 0x1, 0x0, 0x6, 0x7, 0x1f, 0x8, 0x7, 0x4, 0x80], 0xf})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x400, 0x1})

[ 1759.172233] binder: undelivered TRANSACTION_ERROR: 29201
08:40:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7a000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1759.347194] binder: undelivered TRANSACTION_ERROR: 29201
[ 1759.891143] binder: 5122:5202 ioctl c018620b 0 returned -14
[ 1759.949267] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1759.963203] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1759.975057] binder: 5200:5282 transaction failed 29201/-28, size 0-8 line 3147
08:40:07 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0)

[ 1760.024950] binder: undelivered TRANSACTION_ERROR: 29201
[ 1760.067801] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1760.096786] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:07 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={<r1=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000440)={r1, 0x1000}, &(0x7f0000000480)=0x8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@local}, {0x0, 0x9}, {0x0, 0x0, 0x0, 0x3c80}}, {{@in=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x81, 0x121001)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000180)=""/236, &(0x7f0000000080)=0xec)
arch_prctl$ARCH_GET_CPUID(0x1011)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xfdfdffff, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1760.223751] binder: 5122:5301 transaction failed 29201/-28, size 24-8 line 3147
[ 1760.481524] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1760.626988] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1760.780327] binder: 5325:5328 transaction failed 29201/-28, size 0-8 line 3147
[ 1760.806534] net_ratelimit: 26 callbacks suppressed
[ 1760.806542] protocol 88fb is buggy, dev hsr_slave_0
[ 1760.816424] protocol 88fb is buggy, dev hsr_slave_0
[ 1760.816773] protocol 88fb is buggy, dev hsr_slave_1
[ 1760.821723] protocol 88fb is buggy, dev hsr_slave_1
[ 1760.831799] protocol 88fb is buggy, dev hsr_slave_0
[ 1760.836900] protocol 88fb is buggy, dev hsr_slave_1
[ 1760.841996] protocol 88fb is buggy, dev hsr_slave_0
[ 1760.847189] protocol 88fb is buggy, dev hsr_slave_1
[ 1761.053630] binder: undelivered TRANSACTION_ERROR: 29201
08:40:08 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x200000, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x2b00, 0x0)
write$cgroup_type(r1, &(0x7f0000000500)='threaded\x00', 0xffffffffffffff41)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0)
accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80000)
lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
write(r0, &(0x7f0000000280)="718e78edd4f78cb90e9361df5004cad5f44a581fb8114c61916c9c0b96b1f9ac3a6b3a55521c1720758159622448db52dbd6bf4294185cccad6bfa0d1e14d9c7900211321d141ed8dcbc19646f2dde79", 0x50)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@empty, @in6=@loopback, 0x4e21, 0xfff, 0x4e24, 0x8, 0xa, 0xa0, 0x0, 0x2f, r3, r4}, {0xcf, 0x20, 0x0, 0x5, 0x8, 0xfffffffffffffffd, 0x7, 0x9}, {0x4, 0x0, 0x6, 0x9}, 0x9, 0x6e6bbc, 0x0, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0x2, @in=@broadcast, 0x34ff, 0x1, 0x2, 0x8, 0x8000, 0x5, 0x100000000}}, 0xe8)

08:40:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0)
r2 = dup3(r1, r0, 0x80000)
ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000080))
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)

08:40:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:08 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x60000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:08 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
write$smack_current(r0, &(0x7f0000000240)='-)wlan0md5sum&vboxnet0\'\x00', 0x18)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
umount2(&(0x7f0000000280)='./file0\x00', 0x8)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000640)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e22, @remote}, {0x2, 0x4e22, @multicast2}, 0xc0, 0x0, 0x0, 0x0, 0xff, &(0x7f00000002c0)='sit0\x00', 0x6, 0x6efa, 0x8})
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000004c0)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="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"], &(0x7f0000000400)=0xd1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000440)={r3, 0x101}, &(0x7f0000000480)=0x8)
r4 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x100000001, 0x100)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2)
write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0x88)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xc0d, 0x40)

[ 1761.216429] protocol 88fb is buggy, dev hsr_slave_0
[ 1761.221536] protocol 88fb is buggy, dev hsr_slave_1
[ 1761.233992] binder: 5335:5343 ioctl c018620b 0 returned -14
[ 1761.259120] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1761.273549] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1761.283420] binder: 5336:5344 transaction failed 29201/-28, size 0-8 line 3147
[ 1761.316243] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1761.382158] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x100000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1761.437427] binder: 5335:5386 transaction failed 29201/-28, size 24-8 line 3147
08:40:08 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:08 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1761.563259] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1761.584409] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:08 executing program 5:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffff9c, 0xc0585609, &(0x7f00000001c0)={0x2, 0xa, 0x4, 0x2, {0x0, 0x7530}, {0x3, 0x2, 0x6, 0x800, 0x2, 0xfffffffffffffffa, "259a2eb8"}, 0xfffffffffffffff9, 0x2, @fd=<r0=>0xffffffffffffff9c, 0x4})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2)
statx(r1, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x130, r1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1761.609198] binder: 5655:5656 transaction failed 29201/-28, size 0-8 line 3147
08:40:08 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x200000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:09 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070")
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00\x00\x00\x00\x00\x00\x00\x03\x00', 0x19, 0x2, 0x2b8, [0x200008c0, 0x0, 0x0, 0x200008f0, 0x20000920], 0x0, 0x0, &(0x7f00000008c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x13, 0x0, 0x0, 'yam0\x00', 'hsr0\x00', 'rose0\x00', 'ip6erspan0\x00', @remote, [], @empty, [], 0x70, 0xb8, 0x130}, [@common=@ERROR={'ERROR\x00', 0x20, {"9cb180fea1319d378db3747cb3b6a23bc38731dd70c258ebd5d1a9c13f29"}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x7, 0x3ff, 0xfea6, 0x0, 0x0, "12e8ac33ee5db655ff5a5495c8982a7605b632113a29ac4a18d015e6ad3538c69bd8a14c4e684828c14b37fe68c96d537d77779b503faa5708b0edc4a16890c4"}}}}, {{{0xb, 0x0, 0x0, 'veth1_to_bond\x00', 'ifb0\x00', 'veth1\x00', 'sit0\x00', @link_local, [], @broadcast, [], 0x70, 0xa8, 0xf8}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x0, 0x100000001}}}}]}]}, 0x330)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
shutdown(r3, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1761.899558] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1761.908162] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1761.934057] binder: 5692:5752 transaction failed 29201/-28, size 0-8 line 3147
08:40:09 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x68000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1762.106982] binder_release_work: 3 callbacks suppressed
[ 1762.106989] binder: undelivered TRANSACTION_ERROR: 29201
08:40:09 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000180))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x300000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1762.171614] binder: undelivered TRANSACTION_ERROR: 29201
[ 1762.381012] binder: 5884:5885 ioctl c018620b 0 returned -14
08:40:09 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x100000, 0x0, 0x4000000000000000, 0x0, 0xa, 0x0, 0xfffffffffffffffe}, {0x2, 0x0, 0x2, 0x0, 0x8000000, 0xfffffffffffffffc}}, {{@in=@dev, 0x4d2}, 0x0, @in=@dev, 0x0, 0x1, 0x0, 0x0, 0x100}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1762.557397] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:09 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:10 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40000, 0x0)
statx(r0, &(0x7f0000000080)='./file0\x00', 0x7000, 0xc, &(0x7f0000000180))
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
socket$tipc(0x1e, 0x7, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f0000000400)='threaded\x00', 0x9)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

[ 1762.986868] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1763.024719] binder: 5886:5888 transaction failed 29201/-28, size 0-8 line 3147
08:40:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x400000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1763.604944] binder: undelivered TRANSACTION_ERROR: 29201
08:40:11 executing program 1:
ioctl$VIDIOC_QUERYBUF(0xffffffffffffff9c, 0xc0585609, &(0x7f00000001c0)={0x2, 0xa, 0x4, 0x2, {0x0, 0x7530}, {0x3, 0x2, 0x6, 0x800, 0x2, 0xfffffffffffffffa, "259a2eb8"}, 0xfffffffffffffff9, 0x2, @fd=<r0=>0xffffffffffffff9c, 0x4})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x10000, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2)
statx(r1, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x130, r1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6c000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1763.733955] binder: undelivered TRANSACTION_ERROR: 29201
[ 1763.772605] binder_alloc_new_buf_locked: 1 callbacks suppressed
08:40:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x28a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8292, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fallocate(r0, 0x2, 0x3ff, 0x4)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1763.772614] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1763.796538] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1763.796552] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1763.814708] binder: 6002:6010 ioctl c018620b 0 returned -14
08:40:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x500000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1763.867788] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1763.881843] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1763.897697] binder: undelivered TRANSACTION_ERROR: 29201
[ 1763.904000] binder_transaction: 2 callbacks suppressed
[ 1763.904016] binder: 6002:6013 transaction failed 29201/-28, size 24-8 line 3147
08:40:11 executing program 5:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/snapshot\x00', 0x20000, 0x0)
statx(r0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x800)
ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000080)={0x3, 0x5})
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r3 = geteuid()
r4 = getuid()
r5 = getuid()
syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x4000000, 0x4, &(0x7f0000001500)=[{&(0x7f0000000200)="176c8ca3a8614b649420910411c110e4fc5f2b729d3b025f4501aa764a7bf9263171550d3cf6c27527df6dd1771cfe313d29f7a214202d10d5df3adaf7bff65131c6fd9d1ad61ae9f247a62f216bc936b2f04646aa88f5d62d03501f393b7c337c1a0c", 0x63, 0x6}, {&(0x7f0000000400)="0c30965dda7e4fcb72e176f7085db1bd46fa1c4544a5a160538192e56d02b088e990d03ab9caa008355eec731da51e4d92176251b330c5da200c9338c67b4bfbf4645e1ff7176ce3241ee6124c3289f91cf7c502c4c1f42a67c2ed34411ab97eb78bf5eacc1664d06be752f8a7536821fe5f4713683e8ebf1c228c573880c1bde7f8e4ebe3f5af6d333bd185a3df09c6f80582da2c42117925faca77db7bdf6260542d6bc3bb30c5fadb851debb5071a0a9bef9621203a77870852d6c399444b23da5c20376f056a0361011074", 0xcd, 0x8}, {&(0x7f0000000280)="40a4a092ae3576eb6c9afc4436ec17858a06028fd74b99012f07c279dc0e53347ac17c372c439281d5be748ab9a37a62ede24cfc28c73607f61e7572fb9c9d4ab394fbb1270621136573e715cce61e292eba1f50", 0x54, 0x7}, {&(0x7f0000000500)="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", 0x1000, 0x222}], 0x1040000, &(0x7f0000001580)={[{@ssd_spread='ssd_spread'}, {@clear_cache='clear_cache'}, {@noinode_cache='noinode_cache'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x567}}, {@nodiscard='nodiscard'}, {@max_inline={'max_inline', 0x3d, [0x47ca06c5b51faaba, 0x38]}}], [{@subj_type={'subj_type', 0x3d, '{em1eth0'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'threaded\x00'}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/snd/midiC#D#\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@dont_appraise='dont_appraise'}]})

08:40:11 executing program 1:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@loopback}}, 0xe8)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x40800, 0x0)
ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f00000002c0))
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:11 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff)
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x1, 0x5, &(0x7f0000000040)})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1764.541240] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1764.577661] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1764.588037] binder: 6018:6021 transaction failed 29201/-28, size 0-8 line 3147
08:40:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x600000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:11 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x74000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:11 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = getpgrp(0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r3=>0x0}, &(0x7f0000000080)=0xc)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x4000, 0x0)
kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r0, &(0x7f00000001c0)={r4, r0, 0x44c})
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1764.632001] binder: undelivered TRANSACTION_ERROR: 29201
[ 1764.641873] binder: undelivered TRANSACTION_ERROR: 29201
[ 1764.936656] binder: 6063:6084 ioctl c018620b 0 returned -14
08:40:12 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xffffffff80000001, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000002c0)={@dev, <r3=>0x0}, &(0x7f0000000400)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00', <r4=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001900)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001a00)=0xe8)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000001a40)={<r6=>0x0, @loopback}, &(0x7f0000001a80)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b00)=0x14)
recvmmsg(0xffffffffffffff9c, &(0x7f00000023c0)=[{{&(0x7f0000001cc0)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001d40)=""/47, 0x2f}, {&(0x7f0000001d80)=""/60, 0x3c}, {&(0x7f0000001dc0)=""/51, 0x33}], 0x3}, 0x5}, {{&(0x7f0000001e40)=@generic, 0x80, &(0x7f0000002240)=[{&(0x7f0000001ec0)=""/140, 0x8c}, {&(0x7f0000001f80)=""/161, 0xa1}, {&(0x7f0000002040)=""/218, 0xda}, {&(0x7f0000002140)=""/174, 0xae}, {&(0x7f0000002200)=""/49, 0x31}], 0x5, &(0x7f00000022c0)=""/223, 0xdf}, 0x200}], 0x2, 0x40010000, &(0x7f0000002440)={0x0, 0x1c9c380})
getsockname$packet(0xffffffffffffff9c, &(0x7f0000002480)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000024c0)=0x14)
recvmmsg(0xffffffffffffffff, &(0x7f000000abc0)=[{{&(0x7f0000003dc0)=@hci, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e40)=""/18, 0x12}, {&(0x7f0000003e80)=""/65, 0x41}, {&(0x7f0000003f00)=""/141, 0x8d}, {&(0x7f0000003fc0)=""/241, 0xf1}], 0x4, &(0x7f0000004100)=""/40, 0x28}, 0xd9000000000000}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004140)=""/64, 0x40}, {&(0x7f0000004180)=""/255, 0xff}], 0x2, &(0x7f00000042c0)=""/32, 0x20}}, {{&(0x7f0000004300)=@sco, 0x80, &(0x7f0000004680)=[{&(0x7f0000004380)=""/216, 0xd8}, {&(0x7f0000004480)=""/114, 0x72}, {&(0x7f0000004500)=""/1, 0x1}, {&(0x7f0000004540)=""/12, 0xc}, {&(0x7f0000004580)=""/102, 0x66}, {&(0x7f0000004600)=""/69, 0x45}], 0x6}, 0x117}, {{&(0x7f0000004700)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004780)=""/208, 0xd0}, {&(0x7f0000004880)=""/130, 0x82}, {&(0x7f0000004940)=""/7, 0x7}, {&(0x7f0000004980)=""/79, 0x4f}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x5, &(0x7f0000005a80)=""/70, 0x46}, 0x3}, {{&(0x7f0000005b00)=@ipx, 0x80, &(0x7f0000005fc0)=[{&(0x7f0000005b80)=""/183, 0xb7}, {&(0x7f0000005c40)=""/169, 0xa9}, {&(0x7f0000005d00)=""/242, 0xf2}, {&(0x7f0000005e00)=""/202, 0xca}, {&(0x7f0000005f00)=""/84, 0x54}, {&(0x7f0000005f80)=""/24, 0x18}], 0x6, &(0x7f0000006040)=""/251, 0xfb}, 0x7}, {{&(0x7f0000006140)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000a440)=[{&(0x7f00000061c0)=""/231, 0xe7}, {&(0x7f00000062c0)=""/3, 0x3}, {&(0x7f0000006300)=""/4096, 0x1000}, {&(0x7f0000007300)=""/132, 0x84}, {&(0x7f00000073c0)=""/69, 0x45}, {&(0x7f0000007440)=""/4096, 0x1000}, {&(0x7f0000008440)=""/4096, 0x1000}, {&(0x7f0000009440)=""/4096, 0x1000}], 0x8, &(0x7f000000a4c0)=""/237, 0xed}, 0xffff}, {{&(0x7f000000a5c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f000000aa40)=[{&(0x7f000000a640)=""/244, 0xf4}, {&(0x7f000000a740)=""/233, 0xe9}, {&(0x7f000000a840)=""/73, 0x49}, {&(0x7f000000a8c0)=""/98, 0x62}, {&(0x7f000000a940)=""/231, 0xe7}], 0x5, &(0x7f000000aac0)=""/211, 0xd3}, 0x6}], 0x7, 0x20, &(0x7f000000ad80)={0x77359400})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f000000adc0)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f000000aec0)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000b2c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000b280)={&(0x7f000000af00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000ffdbdf250300000008000100", @ANYRES32=r2, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000900000008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="f800020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r7, @ANYBLOB="fc00020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000700000008000600", @ANYRES32=r8, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000140004006163746976656261636b7570000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r10, @ANYBLOB="0001020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000001000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400050000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x36c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r12 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
fcntl$dupfd(r12, 0x406, r12)

[ 1765.005102] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1765.148868] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1765.158422] binder: 6063:6084 transaction failed 29201/-28, size 24-8 line 3147
[ 1765.174391] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1765.200298] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1765.222701] binder: 6133:6142 transaction failed 29201/-28, size 0-8 line 3147
08:40:12 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x800)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{}, {}, {}]})

08:40:12 executing program 1:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:12 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7a000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1765.437037] binder: undelivered TRANSACTION_ERROR: 29201
08:40:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x700000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1765.519298] binder: undelivered TRANSACTION_ERROR: 29201
[ 1765.556536] binder: 6155:6157 ioctl c018620b 0 returned -14
[ 1765.611916] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1765.621320] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1765.632236] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1765.632275] binder: 6213:6299 transaction failed 29201/-28, size 0-8 line 3147
08:40:12 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f00000028c0)='/dev/dmmidi#\x00', 0x20, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000002900))
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x10000e440, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
getsockname$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000080)=0x14)
sendmmsg(r2, &(0x7f00000002c0)=[{{&(0x7f00000001c0)=@hci={0x1f, r3, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)="c5f508153794731ad70db40ab2db722a595d2369e34a8f3876300c646ca81a30bdad1cf56f907fe58d7de8cb5651993bac10c69e454764bc88", 0x39}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="471547cbb8e70148205764879503b994d0da2d984c4ae3b1bd3b9590aec77da31d8b087bee600dcdf7da8c22214ee409b520c9039147e4cd10c0a549c785ca93a5530f15984c92b7872082fa7091004006a054955ed4ad9ec0815f72016c33ba9268093b071e988aada411f39b81fd77e22d06a093cb507f11f70edad7ba00b173082be4c27f4cb7bd8af774eb461a670ea6746a1378263ff2471f041b154549606d735208d0686bd368bd8c6c94d04721b9880f6b0040b1c1fdc4fc7217cfee5618fe9f5b42c4e64d65e257f3f36c6b47363325ce1a21c03f30039d8a1c65c42b5a69e7bd92a8", 0xe7}, {&(0x7f0000001500)="1bb7e1458fb427868bf8a6ad8ba58e26e72ada1b4453e78ac0f25ea340ce32a3e04f36d0f642fdc2e2f2e78f6ace95531d598902ffef54f33b23f10321d562c52642128d934dc9147d0a29f5e3a541db00cbf66a24864760d6232eb5151797b824b6296583e6f87bc3d6558e9d6ccc315295d98880aeacd57ed194687322c552ad6b812361", 0x85}], 0x4, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x1310}, 0xa8c3}], 0x1, 0x20004004)

[ 1765.667222] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1765.692376] binder: 6155:6339 transaction failed 29201/-28, size 24-8 line 3147
08:40:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x800000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:13 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9a, 0x10000)
read$FUSE(r0, &(0x7f0000000400), 0xbd2)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, {}, {0x1}, 0x6, 0x0, 0x0, 0xffffffffffffffff}, {{@in=@dev, 0x0, 0x3f}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001400)={<r2=>0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r3=>0x0}, &(0x7f0000002440)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0xaf4, 0x1000, 0x7ff, 0x48c, 0xffffffffffffffcd, 0x400, 0x12, {r3, @in={{0x2, 0x4e24, @broadcast}}, 0x80, 0x6, 0xffff, 0xffffffffffffffff, 0xcf}}, &(0x7f00000002c0)=0xb0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1765.806221] binder: undelivered TRANSACTION_ERROR: 29201
08:40:13 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0xffffffffffffffff)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1766.013111] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1766.036030] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1766.055225] binder: 6468:6472 transaction failed 29201/-28, size 0-8 line 3147
08:40:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xa00000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:13 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
inotify_init()

08:40:13 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x400, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:13 executing program 1:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1766.250806] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1766.261959] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1766.287340] binder: 6655:6666 transaction failed 29201/-28, size 0-8 line 3147
08:40:13 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2, 0x80)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000180)={0x0, 0x6, 0x8, [], &(0x7f0000000080)=0x6})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f00000001c0))
ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000240))

08:40:13 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xfdfdffff}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:14 executing program 0:
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000200)={0x3, 0xd7, "93ccc7583523322c261810cdedf2ea28710ce0b528954471452404c372c01d116fd8724956577b57fe0ba472e3791b0152befc0ed588dec666b94e3fcac2675463b3d955f822cc9d3563813728171e539cb648840a9c008edf1a450b4f750e9ccf1e4377c040572fb2142499692e2fc34faf31cc99e968a45d3574afc59e2f0d3dfc52fc0d6b8c92917d4b9e9ec2bd1d3530cfea61a88afb8e50054b91095076a8e154576c3a2b45d5d1a665f2a0cf5cdb10090db1561ef9c3e8c91b19505345b2b02d66e36e54aeb822095c6b64c08db5a717760d54d7"})
ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000080))
ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000180)={{0x6, @name="e272611bee4ec7d80fccaf0da73743f4054c683ecd3026a20dcf32b0e1001cb8"}, 0x8, 0xe87e})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00\xa3^N\x17\x190R\xd4\xde\xea\xf1|n\x02\x0f\xc0\xa1\xdc\xdadaq\xd95z{\f\xdf\xf7u\x8c\xa5\xc6\xad\xba\xfd\xd5\x91>\xfbO\xb0\x1bLJ\xcd\xab\xf71\x130\x97]O\x1a\x9c\x1a/\xc6\xc0t\xff\\`\x8c\t\xdeH\xe3uH\xba\xf1\x03\xc0\x8a\xb6B\xec\xd8\x1e\x05.\x8d\xeb\xc1=\xe6\'y\xe5\xf2\xac\xa5(1\xfc3\xf4\x00\xea4__K\xf0~\xb1\xdb\xbb\xfcHB\xeb\xd28-\x94\xcb\x03\x85w\x17H\xc9a\xdeBJ\xc9#\xa2Cah\xf9\xc7om\x94\x8byr\xc2nerxt\rF\xefT4>\x02\xcda\xcf{\xf3Z\x99\r\xc3\x7fw,\xbe}\xed\x1b\x1a\x81\xaf\xdd \xd8\x1e6J<\x92gn\xa9g\xf7\x01\'\xff\xd8u\xad[\x91\x9eQT\x1fG\x00\x02\x00\x00lM@\xc8\x00\x1f3\xa5!\xef', 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000380)='io.max\x00\xf0\xea\xcd%\xd4(/;k\xe6\x8b\x88Gu\xcd((\rvQ\xa2:\xdcF\xb2\xden\xd9\xbc\xf8!\xeb/\x84\xf5`Dbb}\x04\xba\xe5\xedv>\xabn\x0252H\x94.\xbed]O\xd35\xd7\x8f\r\xd9\xadn\xf8\xeb\n,4,\x88F\xe3\xb0Z0\xf7\x8a\\}\xa5', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='0:9\t'], 0x4)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000001c0)=0x9a39)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x1200000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1766.841918] binder: 6799:6802 ioctl c018620b 0 returned -14
[ 1766.924649] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1766.962433] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:14 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1767.046427] net_ratelimit: 24 callbacks suppressed
[ 1767.046466] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.046480] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.051476] protocol 88fb is buggy, dev hsr_slave_1
[ 1767.056486] protocol 88fb is buggy, dev hsr_slave_1
[ 1767.061543] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.076549] protocol 88fb is buggy, dev hsr_slave_1
[ 1767.081632] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.086706] protocol 88fb is buggy, dev hsr_slave_1
08:40:14 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev, 0x0, 0x3f}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0)
write$FUSE_GETXATTR(r1, &(0x7f0000000080)={0x18, 0x0, 0x6, {0x6}}, 0x18)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={<r2=>0x0, 0x1ff}, &(0x7f0000000240)=0x8)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8003, &(0x7f00000002c0)=0x26, 0x32, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000400)={r2, 0x1000, "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"}, &(0x7f0000000280)=0x1008)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f00000001c0)=0x1000)
write$P9_RLCREATE(r1, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x40, 0x1, 0x4}, 0x3}}, 0x18)

[ 1767.092401] binder: 6799:6806 transaction failed 29201/-28, size 24-8 line 3147
[ 1767.107797] binder: 6810:6828 transaction failed 29201/-28, size 0-8 line 3147
[ 1767.117996] binder_release_work: 3 callbacks suppressed
[ 1767.118002] binder: undelivered TRANSACTION_ERROR: 29201
08:40:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x2000000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1767.446449] protocol 88fb is buggy, dev hsr_slave_0
[ 1767.451537] protocol 88fb is buggy, dev hsr_slave_1
08:40:15 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xfffffdfd}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:15 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0xa000)
ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000080)=""/58)

[ 1767.843225] binder: undelivered TRANSACTION_ERROR: 29201
08:40:15 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000001c0)=0x6, 0x4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x100, 0x0)
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000200))
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, [], 0xe}, 0x1f}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}], 0x2c)

08:40:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x3f00000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1767.984307] binder: undelivered TRANSACTION_ERROR: 29201
[ 1768.207790] binder: 7033:7141 ioctl c018620b 0 returned -14
08:40:15 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = socket$unix(0x1, 0x7, 0x0)
recvfrom(r1, &(0x7f0000000180)=""/132, 0x84, 0x12001, 0x0, 0x0)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4000000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1768.758864] binder: undelivered TRANSACTION_ERROR: 29201
08:40:16 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffc)
bind$netrom(r0, &(0x7f0000000280)={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000180)='cgroup\x00', r1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1768.868647] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1768.868656] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1768.920084] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1768.920097] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1768.965753] binder: 7033:7142 ioctl c018620b 0 returned -14
[ 1768.997204] binder_transaction: 3 callbacks suppressed
[ 1768.997220] binder: 7236:7251 transaction failed 29201/-28, size 0-8 line 3147
[ 1769.000470] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1769.035951] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1769.045984] binder: 7033:7259 transaction failed 29201/-28, size 24-8 line 3147
[ 1769.074502] binder: undelivered TRANSACTION_ERROR: 29201
08:40:16 executing program 1 (fault-call:2 fault-nth:0):
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1769.152344] binder: undelivered TRANSACTION_ERROR: 29201
08:40:16 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x100000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4800000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1769.320470] binder: undelivered TRANSACTION_ERROR: 29201
[ 1769.689924] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1769.707412] binder: 7267:7269 ioctl c018620b 0 returned -14
[ 1769.761221] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:17 executing program 0:
accept$inet6(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x1c)
r0 = dup(0xffffffffffffffff)
syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x244000)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x0)
r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400000)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x10, 0x800)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1769.803971] binder: 7264:7265 transaction failed 29201/-28, size 0-8 line 3147
[ 1769.804105] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x4c00000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:17 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x108)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x400800, 0x0)
statx(r0, 0x0, 0x6000, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000001c0)=""/54)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1769.872371] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1769.891643] binder: undelivered TRANSACTION_ERROR: 29201
[ 1769.892471] binder: 7267:7336 transaction failed 29201/-28, size 24-8 line 3147
08:40:17 executing program 2:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
dup(r0)
syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2)
r1 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0xfffffffffffffffe, 0x100)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x9)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4801c2, 0x0)

[ 1770.250827] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:17 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x02', 0xff4c)

[ 1770.339925] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1770.379205] binder: 7379:7383 transaction failed 29201/-28, size 0-8 line 3147
[ 1770.697693] binder: undelivered TRANSACTION_ERROR: 29201
08:40:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x200000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6000000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:18 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x10000, 0x410000)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x2, 0x3, 0x3f, <r1=>0x0}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={r1, 0x1000, "49aafbceb1698039ecb2c43e45308bffadc716c0262ee1167f1bde2cdcd42f4db6aabc5fd820b4f230adb9fcf2d98e6df86b2e9d80c5e4cd5c8436dde93644889646607f34e5b8f318a6723a705aeb2dbe2ad499a9726f0039ff14c3eee2f1845aef937f701a2c62ff64329219480b4c94bb0255e180c9a14d5d94c5b043f4cb1e5ad469c8580b6425dd8bd1245ee5ba44f71b1dd5223e2345887b1cc73c83bb4cf9023c098db656da8fa92e4e09385f1e0636f9372822fc6112fe063d25b56fb6d87b74a04dc63d7ca74713b0f4195ebbdfaf1b93f9b56c12a02a6f0433f9a0e6187773b79b85cfcd00e185669fb1fabd905a3d0fed3016988bad1721fb9a34cea97414a5b9de13489dda13e0234e706c2874a09cffcea2cbee2f274de8393295d18d3f75ec8a685bbf993f0484e01aa04072c86581618ab37b6db7db2925f7a352510edee69c56087c709b969fdcb7881c67dfe300a3c868272d5727c4aa887f52cd69c47692fff9a7c3cc25fe10d0e397adc41252937f91b351b61d9d654bb59759fd1d58fe299069610e678922fe800b9e26c149b61793e7ed1f988e7dbdbb870e8d95fb42e1462daab1f5a2dc20a2bc1a842bd3f94aab11219926fc25aa301a99446f04b5372a8e2d994a97534c1b0d7267b9820d7e72ce33ab05c4f5f9a7be6b42ac75375160b620ad76a25bc4bd2c2a6d8e0a0a2a4de68b36f5e59f604b1aa5bdb87af760703023a4fa5ec20df42e5f7068b845fc7b2ecae3cb776f069da4fb37ad98d35492eb5900e9d0876f54af68a5ce90f1aa69be15f2176dd04ca357905e89a78fa86180e9b3c4c12bd0355c9e7bded76fd555005f4d71db07266183ea1849643a907a2d657287b3c458509513f497a58c111bd7d4a0a0554cc77a9ff786e4c644c42d4aaf4490ab0a5eb6e334dac302255aadc6464b45ac12b844e08bd20b7a3dcfbe05215d7984bb3be89021b70004fb7ce15bf19994e6273610353c8a9f5835f8aedea43be23149ba65336f7bc438a60394be53dddc3f6372a6f0773abfc5e7325cfea05809eb7f3af1c2db4164ea997dd9dcd2e8eaf95da8bec06933fa4461e4baf614d9402e44be668213dde6da7658726e3661c9b0cd79e56fa2ffbd2ef5c2a3c2427bd7e5d62be54cbf8e316304e6f5bc5b5d33e2706e88cb232041535fbeab4a447b92c8678dddfe949f4bbabd27330f970baf5ff6fa7aa9714435bdeab8732f144070bf4b734ed52487171706067eaa54b35ac0e55929ddd588e0220ee8d1b416d9258170ed07ed675c074650f7409a028a6db5a2aeb007f213c160582dd71e62ddea22639bd5abc06fd3af42a5f6eb5c4822230d3b8db5f9e52e9204f424a4271798a5b70acebdf94fdc33d7c6ab0094c1d8477cff51bf318dd3c361366cf6cdba67ff3de37e4416388476dc7a1a491d39e687a93ac1ff50713ca7cce0ab848ec78ac61a0065d9459406f48f0cf6dc903bd665d875d8ffc683e29c12a0e79f0781f91dfde98657d65c82caad6890d76d473fcdde7de9518f6c0469b4659c156ad1ff8fa72e9ab239b22b4b7eaca4368039613228b3a783bb4d1a431b2d5757b39269716cea28d919dafc7bb965e63d12e0b7e0c6e9174a0dd21feb6c98f2d8aa3d84e23039099283a318d1cd77a6e6a72d46f5cd1344974bf10397eeb2772a4ec64c9986d70b4f83d1ea3036ad2e366bd3b8f148c41ebfc409d30d3fbdd25c5de3fce67c5dd0a0aa918bbba31fcbf844c76ce46c31a9c544de1520f704115b44256de3a632e3869af58ff81d0ffdb342136679b882c4091722b2c1459b7f3ba796bda2c291cae3b751753823ad3b9c1d22aeb1fd2a35a163e4ec3ced3eeb9a17726d201f3ea9477a8bbb889fa75f3a7de4c05c8fa3dafe92962169fd0966302f7732bf07d040c493f4579ee68d426efe54cb5d3766ef04e634f78c2f38a3b910c067a5f08f35bb61a227909c8d9b8eb87d4337eb5259cad9d608f23d5c2828b8eac58e0bab35d7d93f3524d161554d35de1ff450b9052cb3c4f7789078c1ea6239f6ae82aa12d93797abc1bf22c20e35fd26429300817c93b98fd5e9a9dd4377dc930464979a4346dc20da14be67260fb8a4e13fa63aa5298ab399a475d4e2d16949dcd1731e11224c256617389f13e5b2da1092563ad5995b55e726f52d5f912c35ca148d2d8578ead2f5663c86dc84c9bacadd4f47c3c8e6e37a2d485262b4b6c765bbcce82ff04017c403993e7f5bf0bae91f70fedad54e4f1dbf0b9e2df5e5e4fe400de8f036160dfee31753836916fedbf9c9cf9135d09b237f9111d036881be55d9c3f3498ed298699251433f4e726401bc88ffc3e433e3931832da30fb19a402172a930265ca1b65ace34956ff8b8a40bf4fdc543dea8ea8a6d77c01f356dc723eb6b3fdfde0f752534af4224c36b1e612a2ecd2651dbc6ee177975a19f6f922dbcda9a569034483acfe7f0232fbc5aed7ce1a81566c78c7206971164939bd51a4838be49415c80114b5c7b0f185f16f0160a6a0226e314198f62eeda324b61e89da5bea7848c8b95542c9933491d7d8f334df28e4cf812b23998e4bf80b03628aeeff15454a18799f941962a219a339765922c0e06610fc914f482a5c9d4601c02f698d064476c2dbcbee0405c5e9c8005170013e9d752996352fa1a27b8c06cc4ac86e2ab08bfd0ba2e2ff3e5391910933ea319852916c484bf2ca56107457ec4100a87faccdde191beab88d00d29e4fb703cc748c59ebfc0ff630da2b7bf744cb990b99a7c8f77ccdc7515ea93a52d12ef5273d66b3eaec8eec0038b695cae96e58f6f4ee277548aa531f2e4d65be48687b3715f8271a562f8a0dae8bdc7052354bae74b8b99eec854cdef8488eb8e2075ec8240baecf9d236beb505c6e2c102ef4101aee7a236db9e97ec0074df61691a3977365975357297a376c74e8215297793ceae260dd0195fa89c6461f0dd6354187b08ee46fc6edb130073fd6ca7b576b479336c79476927da357fd966b757d790f3254c6d625b1c4f0c7526732aae8a8febe5de3e8f203fd7c4d4f2960fb388756cc5253607221ce3e5bb4bf5e5f8c22ee4314a2cb002041b1c604b26b57c9fe558d6188ce87fbfb3906cce4e37cceba753d446a9b6124369790b7db18943ddef6054befb20899d13fd30d0f0426c47883f9d5c0564c3fbe3a729cb84243d9223d2ae8814fb822eb5e38d24f7cd8eb7ae101215dc40d9f86899938dc9bc03e8979890351507658873025d4bacd7fa5f54cb91b6df21a8155a822124280cefd01693dd75d6baaf503f375c92a19b3b0371c9ab7f94441c62bad232213bfff6d28cfa963b9813682bc43b38397c3915219d5ad888ff9158e9eb2b5f8aee83b12079db5c478508aa57010c80e0c1045c157f157fb1e2c18ef44f992af3b5a777a018dce3f891772704ff57750b1a45ffa5dcc90e4dbf2f49b9470480eee25a7725d03445401341a585a9e4f0c06828ac146f4a9f434548a75fff0fef094e534ecdff912a27e00c080d5e9032ccea7535cac09a69148eb64fb990f8374ae0838010600e68b4218923efa145af6f4a4934471a1e9f8b69a6b92eb686f0b708f23eca7ef6d5b1d59d3f3c050a505201157594a132151fade2e4da9d5d950378bec64cd32b36d064a70f6919e6eb7dd3bef17e40647654ca6160e143240db7772822ef75d14c1d24f73dbd3da390fa275e53b1b9d88630296167351a48c423c89cae02a3de14c482d2c7179ff0f2414bf173f32227c3ff7d61a6414301815f422a1e968db66ef4e65459316a17e7ad08df1e0b6ec702f0c9aad7cfa164b865e87d9a1821e5b754492d0a5cbaba01ed9698d12c9e04a1bf887c687fba29be5777bf003d0895970ca5a064f76c75366333fcdddeb8e57069b6004ce0d13283c9db9efdab3685c09f1cb0d3329f4b432c2fd946aff491589564248e3f0c0290d625c6e91aa0f1362b74e8656dbf23543feed5dee51d533d7f67e7e1a8b6108802dc45f364f4f6f01140377ff7d8ce2d8645e5064f8b70873c3427a3f21142b170a110511551eeec8a504d8f15c4d149058505dfd0ff87e6285efdefa656d03059b62a46eb494a0d9b388eeada37789370fac2fb03cd3595f4e62ae72299c0151a4e3bc18987ff9d99ba2db2e679a09422fa7d2e8f5f3935033903b614039d3823acffb1ab0605039b0431d69b0bd99d359efe9e3873f96eb6e6a217f5871a45f07048b84a07fb4b27c732d46a8b3b0a7f5bd4d58052884679ce3395b4909668ec0aab9cf5ba9bdd01e0de054c37463e9e0fdb43da7445d380ce656a1a361f3a2587a7fe17e439d26cd709a93824fcc2f9ffd1db59643f347b731b48647dae2ca3923da2de76487a1d8c70f43f38e9dc7277120fb3ff5e0b7fc78ff010ef0f180e0ac6f5665df424a9c658174437c0b1fcbad6586b34f17a55300a7b469bb58851f8c3d05ec6d539bcc69d3af5b1a723316f2bbee81e5f6abb7e1c698738cd7b0b2fc10ece2e0406f99bf5940008853ee8d840b902eefd5467fb1a0ef50a87570b4b1d6da461ab5759fa77c0f4b79497608100b06b838c352cfc6c66f1e3d0fd66d14d00421688bef088adbab6e6795c90e1e43cda72cafbc9886e74186c0d9a4caa796a6336c17c2dcd276500cb784471cb29b60bbdbc8ca6acb8aea6b0f0ac271ba9f464bf2c991daed9c124d5380dd1bd59d39d1b85f95be840896461e2543ab9000ee3eefc4cda1cd812b4dab31160a06f1b5ac3e6b2311ed850c671bcb2b81175bd4639bffe27309bc28f5c323c48e75075e9f8b68a88cd54972346c897d6c3a3f0f95d6a1cee3e96773a69f0f47727d7a9eeb10454a0a3a745f10639a9ff776290b3de0e71aaf2fd1441566554c1f035109a3eb6403b213ee8a543baf5dff92a560bf1da88a4b48b2fd2c7538cdc112bed6c2b47d4b557ea1d16c4e7ed4e8bc8ecfab591286ebbe6479e697740f728cd51ce78ac7ca41b70cf5477fb93aacba36dc3da0f64b5f73a55edb8003095c9d909ca9c6cc4b630843c699d049cf1707cd4bd11c05791d78253ba804e254a26bae1675e2de27fbfc5cf493e1a287d1976a4db9867adc08dbdaa159f6b62af0f8f80616b35751b0eb28ca34a429f1c0b3d65d6f6a0e8930f2325870db05ac194544f318b0c40cc8d9ab5f8af9758c4efe5675a23ca226192778cbc2009c196a89efc553992e6900a86fbf4e9969386b4cab51f372c22e01198e67edae3ac201186168f12e98d393ae20e03516f735e87e59c6e8e6260069339832065f5b6afb651968afc6b30b9ae2fd1cb874fa585a0e289b44265049a5292dfcebde7195d794ab00a591f4ca68a256e7f6be5836fb9369b7fd27ea51799af71d8d9b5e36cea85a55bc12e7760cf05305f740f0c7bb2367d6a76f3c6be2df079f3fd35651df120e7574947ed54fd3d73378a7db4f69726fdf8f01c1d6b2d7a7cb5c39aab0a61555116a69431352f02d517223ab80d297af2b722e862434373b2581c8eb36a45c24823938346944bbecad577b9d7766b89b90e5d2529eea64ebe8b31bc68161dc28383e01c250ba11bdbee9e74447b96b782eb52856c03691c3ad5a8faf633f6d0257906ea5d40b9615e583a8d9cbd95cecd504f1011bed4fc726a368eb75baffdcf942419eb2d5b2b5ccae8fdcc7953a74af3f419596e4f266a3abc7bc7cd5d49d13bb89605a7419784e50766e791c009fe8f18caca3ea49e67c5e5c0a673a5c9d1da3613b9c7568254b492cf95dc974091"}, &(0x7f0000000280)=0x1008)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xff, 0x2)
ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000180)={0xc477, 0x3f, 0x7})
setsockopt$inet6_int(r2, 0x29, 0x7f, &(0x7f0000000080)=0x7fff, 0x4)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1770.797933] binder: undelivered TRANSACTION_ERROR: 29201
[ 1771.007066] binder: 7510:7541 ioctl c018620b 0 returned -14
[ 1771.016067] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:18 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x4000)
ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1f, 0x9, 0x3})

[ 1771.182148] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1771.334109] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1771.346992] binder: 7517:7553 transaction failed 29201/-28, size 0-8 line 3147
08:40:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6800000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1771.406595] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1771.445158] binder: 7510:7541 transaction failed 29201/-28, size 24-8 line 3147
08:40:18 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x300000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1771.521479] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1771.548763] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1771.559169] binder: 7609:7611 transaction failed 29201/-28, size 0-8 line 3147
08:40:18 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xc3)

08:40:18 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x10', 0xff4c)

[ 1771.588081] binder: 7613:7614 ioctl c018620b 0 returned -14
[ 1771.652097] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x6c00000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1771.717301] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1771.806559] binder: 7613:7614 transaction failed 29201/-28, size 24-8 line 3147
[ 1771.832374] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x8, 0x240000)
setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000280)=0x2717, 0x4)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f00000002c0)={0x80000001, 0x9, 0x7f, 0x3ff, 0x1, 0xffffffff})
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
dup2(r0, r2)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={<r4=>0x0, 0x4, 0x2, [0x1ff, 0x5]}, &(0x7f0000000180)=0xc)
getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=<r5=>0x0)
setuid(r5)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x8020000000000000}, &(0x7f0000000200)=0x8)

[ 1771.862618] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1771.875384] binder: 7687:7767 transaction failed 29201/-28, size 0-8 line 3147
08:40:19 executing program 5:
r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x311100)
statx(r0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:19 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x400000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:19 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7400000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1772.212285] binder_release_work: 4 callbacks suppressed
[ 1772.212292] binder: undelivered TRANSACTION_ERROR: 29201
[ 1772.309995] binder: 7838:7843 ioctl c018620b 0 returned -14
08:40:19 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400081, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x10000002)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000180)={0x57, 0x7d, 0x2, {0x0, 0x50, 0x80000001, 0x2, {0x0, 0x3, 0x3}, 0x4000000, 0x2, 0x81, 0xfffffffffffffff7, 0x12, '/dev/snd/midiC#D#\x00', 0x6, '$%ppp0', 0x2, '!+', 0x3, ':{-'}}, 0x57)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x7a00000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1772.706980] binder: undelivered TRANSACTION_ERROR: 29201
08:40:20 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0xc, 0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = dup(r0)
setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x77, 0x1, 0x40, "665d51ed243cb64b68e808315c53eb82", "53d69ba47f9427f3a465c40f247ec4381f048d6498c920a1f9f49484c758d37d83324ae65fc996bddb0e007f7cbb846ec0503de7c3ac4f597f0fbf420707a70fc5736043010a102ab8362ce30d49aae7aa682d89107e33d396447e5faa0c68b0ef9c"}, 0x77, 0x3)
ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040))

08:40:20 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x500000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1773.265043] binder: undelivered TRANSACTION_ERROR: 29201
[ 1773.286440] net_ratelimit: 26 callbacks suppressed
[ 1773.286447] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.286471] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.291455] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.296502] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.311524] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.316659] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.321741] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.330396] binder: undelivered TRANSACTION_ERROR: 29201
08:40:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xfdfdffff00000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1773.364567] binder: 8109:8110 ioctl c018620b 0 returned -14
08:40:20 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:20 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00')
statx(r0, 0x0, 0x0, 0x7ff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
epoll_create1(0x7ffdc)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1773.642962] binder: undelivered TRANSACTION_ERROR: 29201
08:40:20 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x400000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000180)=0xb)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0xffffffff00000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1773.686445] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.691582] protocol 88fb is buggy, dev hsr_slave_1
[ 1773.697356] protocol 88fb is buggy, dev hsr_slave_0
[ 1773.877171] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1773.877179] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:21 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000001400)={0x53, 0xfffffffffffffffe, 0x1000, 0x1c4000000, @buffer={0x0, 0xb9, &(0x7f0000000180)=""/185}, &(0x7f0000000400)="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", &(0x7f0000000240)=""/113, 0x24ff2234, 0x1, 0x3, &(0x7f0000000080)})
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x100, 0x0)
ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040))

[ 1774.419544] binder: undelivered TRANSACTION_ERROR: 29201
[ 1774.439945] binder: undelivered TRANSACTION_ERROR: 29201
08:40:21 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x600000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1774.676967] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1774.716512] binder_alloc_new_buf_locked: 6 callbacks suppressed
08:40:22 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0)

[ 1774.716527] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1774.738465] binder: 8353:8354 ioctl c018620b 0 returned -14
08:40:22 executing program 5:
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40, 0x8)
symlinkat(&(0x7f0000000500)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00')
statx(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x7ff, 0x2000)
statx(r1, &(0x7f00000002c0)='./file0\x00', 0x400, 0x0, &(0x7f0000000400))
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8, 0x100)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x100000001, 0x7, 0x5, 0x400, 0x5, 0x6, 0x1, {0x0, @in6={{0xa, 0x4e22, 0x3af4, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0xf7fd, 0x6, 0x3ff, 0x8000, 0x7fff}}, &(0x7f0000000080)=0xb0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5)

08:40:22 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1774.863360] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1774.878519] binder_transaction: 6 callbacks suppressed
[ 1774.878536] binder: 8351:8352 transaction failed 29201/-28, size 0-8 line 3147
[ 1774.966574] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1774.991813] Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1775.051995] binder: 8353:8354 transaction failed 29201/-28, size 24-8 line 3147
[ 1775.128603] Enabling of bearer <udp:syz1> rejected, failed to enable media
08:40:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000000)={{0x3fb3d1d4, 0x2, 0xfff, 0x200, 0xe2, 0xb192}, 0x10000, 0x40000000000000, 0x7508})

08:40:22 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x700000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1775.231246] binder: undelivered TRANSACTION_ERROR: 29201
[ 1775.247224] binder: undelivered TRANSACTION_ERROR: 29201
08:40:22 executing program 2:

[ 1775.494039] binder: 8370:8451 ioctl c018620b 0 returned -14
[ 1775.558409] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1775.650921] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1775.682696] binder: 8370:8451 transaction failed 29201/-28, size 24-8 line 3147
[ 1775.691584] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1775.699288] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:23 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x5}, 0x4)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:23 executing program 2:

08:40:23 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xa00000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1775.783271] binder: 8431:8529 transaction failed 29201/-28, size 0-8 line 3147
[ 1775.821021] binder: undelivered TRANSACTION_ERROR: 29201
08:40:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x99, <r2=>0x0, 0x10001, 0xffffffff})
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@getae={0x64, 0x1f, 0x400, 0x70bd2c, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x4d4, 0xa, 0xff}, @in6=@remote, 0x7, 0x3505}, [@lifetime_val={0x24, 0x9, {0x6, 0x9, 0x7fffffff, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f00000000c0)={r2, 0xae77})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

08:40:23 executing program 2:

08:40:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1775.913684] binder: 8625:8662 ioctl c018620b 0 returned -14
[ 1775.961259] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1775.993443] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:23 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0xe440, 0x5)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000180)=0x4)

08:40:23 executing program 2:

08:40:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000400000000377c4d0fd40c30957014e0df3d0392fd07513c8d35a23baa29bd134f8a5306acb86d68b95986096e291fd092592399cb4a289950334c131094e0bd59d63b5c4c05985dc46a5464cb38265d45f140033ea277e02be6e323f7d62f7858467ec642f426a342356cab253c059309d0e981061c5fa1ba2206b5089799f678f1cc8f350ab2849e78b9c55cd05322bee7457ac804277ec2f1c338770a9a7a98ee719f8e3e8d5ca31bf6fe5c8ba554084dcee58d8ff7e5be622e6f006df43302b6614465d58d074c7c6537e5d9a1", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1776.007037] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1776.015558] binder: 8675:8695 transaction failed 29201/-28, size 0-8 line 3147
[ 1776.015670] binder: 8675:8722 ioctl c0306201 0 returned -14
[ 1776.030271] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1776.043850] binder: 8625:8709 transaction failed 29201/-28, size 24-8 line 3147
08:40:23 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)=0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00')

08:40:23 executing program 2:

[ 1776.233148] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1776.272294] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0002000000000000"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1776.286249] binder: 8812:8827 transaction failed 29201/-28, size 0-8 line 3147
08:40:23 executing program 2:

08:40:23 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1776.460603] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1776.486562] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1776.527299] binder: 8843:8865 transaction failed 29201/-28, size 0-8 line 3147
08:40:24 executing program 2:

08:40:24 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x302c0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={<r2=>0x0, @local, @multicast1}, &(0x7f0000000180)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@mcast1, 0x4e21, 0x6, 0x4e23, 0x2, 0xa, 0x80, 0x80, 0x3d, r2, r3}, {0x1, 0x5, 0x3, 0x1f, 0xfffffffffffffff9, 0x0, 0x1, 0xff}, {0x2, 0x3, 0x1, 0x3}, 0xfff, 0x6e6bb5, 0x1, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x18}, 0x4d6, 0x32}, 0x0, @in6=@remote, 0x34ff, 0x4, 0x3, 0x9, 0x8, 0x1c6, 0x3}}, 0xe8)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:24 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000040)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x1)
r3 = dup(r0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000080)={<r4=>0x0, 0x1, 0x20}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000280)={r4, 0x3}, &(0x7f00000002c0)=0x8)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:24 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x1200000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100, 0x14481)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000000c0)={0x3, r3, 0x1})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={<r4=>0x0, 0x6, "5a9c880f99b0"}, &(0x7f0000000140)=0xe)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000180)={r4, 0x800}, &(0x7f00000001c0)=0x8)

[ 1776.819814] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1776.848233] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1776.857466] binder: 9024:9074 transaction failed 29201/-28, size 0-8 line 3147
08:40:24 executing program 2:

[ 1776.948973] binder: 9148:9165 ioctl c018620b 0 returned -14
08:40:24 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/sequencer2\x00', 0x400000, 0x0)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @loopback}, {0x307, @dev={[], 0x26}}, 0x8, {0x2, 0x4e20, @remote}, 'bcsf0\x00'})
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2e)
syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x7, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
recvmsg$kcm(r1, &(0x7f0000001580)={&(0x7f0000000240)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/77, 0x4d}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000001480)=""/90, 0x5a}], 0x4, &(0x7f0000001540)=""/45, 0x2d}, 0x40)
setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0xeddf, 0x4)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1777.056241] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x1ce, 0x0, 0x0})
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x428100, 0x0)
write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x2}, 0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:24 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1777.142986] binder: 9148:9165 transaction failed 29201/-28, size 24-8 line 3147
08:40:24 executing program 2:

[ 1777.827211] binder: 9172:9175 ioctl c0306201 20000440 returned -14
08:40:25 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x2000000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:25 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x34400, 0x0)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0xfffffffffffffeff}, 0x4)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180)="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", &(0x7f0000000400)="fe8af501af6e3142b817a8c8c2c44d1e684ecf3e8c3c7ce4d38fce7ff6c34347a3b603979f721ec78b755462fbe237f050fc385934d07ae61341a82434996e82a3f815d9b1033b59cab7e556b299eb60c0716b76f37d9e8f429634099aa1e0c1658ee902ea152ea544595ca034f021af92100a8d7e43ef308959b81c237022230f9391432082041c522878e534d41bc5fad99cc78f0f21d0ba362c38abff99fd9498300cad26216ec9"}, 0x20)

[ 1777.888070] binder_release_work: 6 callbacks suppressed
[ 1777.888077] binder: undelivered TRANSACTION_ERROR: 29201
08:40:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
inotify_init1(0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))

08:40:25 executing program 2:

[ 1777.945126] binder: undelivered TRANSACTION_ERROR: 29189
[ 1777.963320] binder: 9340:9351 ioctl c018620b 0 returned -14
08:40:25 executing program 2:

08:40:25 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x2f1, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x70, 0x1ff, 0x4, 0x3, 0x10000, 0x0, 0x3, 0x80400, 0x5, 0x101, 0x7, 0xe4f6, 0x2844, 0x7, 0x3, 0x8, 0x0, 0x401, 0xfffffffffffffff7, 0x9, 0x7513, 0x6, 0xea, 0x1, 0x751, 0x5, 0x9, 0x7ff, 0x1, 0x909, 0x7, 0x101, 0x8, 0x5, 0x1000, 0xffff, 0x101, 0x0, 0xffffffff00000001, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x9, 0x7fffffff, 0x0, 0x4, 0x4ee, 0x4})

08:40:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000000c0)=""/130)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1778.102807] binder: undelivered TRANSACTION_ERROR: 29201
08:40:25 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:25 executing program 2:

08:40:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000033b32275495bac2dc6aba5f68b6bf39a4b24132a4ebc7d0bf241ef1696436c350218a350273a3f06590e0ced"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:25 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x21f9, 0x100000081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x9}}, 0x0, 0xb, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1778.421741] binder: undelivered TRANSACTION_ERROR: 29201
08:40:25 executing program 2:

[ 1778.574406] binder: BINDER_SET_CONTEXT_MGR already set
[ 1778.585149] binder: 9515:9527 ioctl 40046207 0 returned -16
[ 1778.691306] binder: undelivered TRANSACTION_ERROR: 29201
08:40:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x3f00000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:26 executing program 0:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x200000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', r1})
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000440)={r4, 0x1, 0x6, @random="c499ea60eb2c"}, 0x10)

08:40:26 executing program 2:

08:40:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3, 0x503040)
accept4$bt_l2cap(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xe, 0x80000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
write$selinux_attr(r1, &(0x7f0000000000)='system_u:object_r:lvm_control_t:s0\x00', 0x23)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000140)={0x9, 0x100000000, 0x8})

[ 1778.824865] binder: undelivered TRANSACTION_ERROR: 29201
08:40:26 executing program 2:

[ 1778.887897] binder_alloc_new_buf_locked: 5 callbacks suppressed
[ 1778.887907] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1778.919870] binder: 9626:9633 ioctl c018620b 0 returned -14
08:40:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f00000000c0))
ioctl$BLKDISCARD(r2, 0x1277, &(0x7f0000000040)=0x101)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="364894b1eea272d4"]], 0x0, 0x0, 0x0})
setsockopt$inet_tcp_int(r2, 0x6, 0x24, &(0x7f0000000140)=0xfffffffffffffff8, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:26 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x2001000c)

[ 1778.933070] binder: undelivered TRANSACTION_ERROR: 29201
08:40:26 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0xffffffffffffffff)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4800)
r1 = getpgid(0xffffffffffffffff)
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0xfffffffffffffff8, 0x9, 0x1ff, 0x0, 0x10000, 0x90090, 0x7, 0x1, 0x8001, 0x6, 0x8001, 0x80000001, 0x1f, 0x6, 0x101, 0x7b, 0x3, 0x80, 0x3f, 0x2, 0x4, 0x8, 0x400, 0x7, 0x80, 0x3, 0x8, 0x80000001, 0x3, 0x1, 0x6, 0x20, 0x10001, 0x3, 0xfffffffffffff801, 0x0, 0x59c, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x2000, 0x8, 0x4000000000000000, 0x8, 0xbc, 0x9d, 0x8}, r1, 0x7, r0, 0x1)
r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x40, 0xa000)
write$cgroup_type(r2, &(0x7f0000000180)='threaded\x00', 0xffffffffffffff42)

[ 1778.966168] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:26 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2)
setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0x7fffffff, 0x4)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1779.067943] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:26 executing program 2:

08:40:26 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4800000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1779.144198] binder: undelivered TRANSACTION_ERROR: 29201
08:40:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000000000000000000d6917f1e000000000000000000000000000000000000000000000008000000000000000000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1779.227101] binder: undelivered TRANSACTION_ERROR: 29201
[ 1779.292630] binder: 9744:9746 ioctl c018620b 0 returned -14
[ 1779.394291] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:26 executing program 2:

08:40:26 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xde6, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1779.468048] binder: BINDER_SET_CONTEXT_MGR already set
[ 1779.526433] net_ratelimit: 23 callbacks suppressed
[ 1779.526441] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.526465] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.531530] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.536593] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.551644] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.556813] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.561860] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.642357] binder: 9747:9749 ioctl 40046207 0 returned -16
[ 1779.682191] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:27 executing program 2:

08:40:27 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x4c00000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1779.869833] binder: undelivered TRANSACTION_ERROR: 29201
[ 1779.926448] protocol 88fb is buggy, dev hsr_slave_0
[ 1779.931772] protocol 88fb is buggy, dev hsr_slave_1
[ 1779.936936] protocol 88fb is buggy, dev hsr_slave_0
08:40:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={<r4=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000100)={r4})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$int_out(r1, 0x2, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:27 executing program 2:

[ 1780.470751] binder: 9777:9844 ioctl c018620b 0 returned -14
[ 1780.526048] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1780.534056] binder_alloc_new_buf_locked: 9 callbacks suppressed
[ 1780.534070] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1780.552181] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1780.560223] binder_transaction: 10 callbacks suppressed
[ 1780.560241] binder: 9777:9878 transaction failed 29201/-28, size 24-8 line 3147
[ 1780.611812] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1780.656609] binder: 9815:9881 transaction failed 29201/-28, size 0-8 line 3147
08:40:28 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x200, @time, 0x4, {0x9, 0x1}, 0x81, 0x2, 0x6})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:28 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x9b3d, 0x200)

08:40:28 executing program 2:

08:40:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@md5={0x1, "aa506f5f9aa2d688423d34fa412fdf8f"}, 0x11, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:28 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000080))

[ 1781.033480] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:28 executing program 5:
r0 = syz_open_dev$midi(&(0x7f0000001840)='/dev/midi#\x00', 0xfffffffffffffffe, 0x901)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f00000001c0)=""/137, &(0x7f0000000280)=0x89)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = open(&(0x7f0000000080)='./file0\x00', 0x8040, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x8)
fcntl$setsig(r2, 0xa, 0x20)
r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4)
fcntl$setlease(r3, 0x400, 0x0)
rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f00005a1000)={0x7aad5e5a}, 0x0, 0x0, 0x8)
open(&(0x7f0000000100)='./file0\x00', 0x10008802, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000015c0)={{{@in6=@ipv4={[], [], @multicast2}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, &(0x7f00000016c0)=0xe8)
r5 = getuid()
syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffffffe, 0x3, &(0x7f0000001540)=[{&(0x7f0000000440)="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", 0x1000, 0x9}, {&(0x7f0000001440)="59a955128397e3c350217b62fe14a4a01977e85476bf32683caf99dc7f10f108c7aae8f4826ce4bfae185c8228f792ebcbed3892baeda66da07f1609bd845039bdc70f289c976682a80fd773443938c1b426330a7f116021defc3b06effb87b5769c2ffe74614c6142ca5746979f6c2ac259d2a861f2dfa2b026b0284726934b4d9cf342a556a60b9ea66f212005b45d86f9e65ab99c9516f7c2935237ed4c7e14c5fe22ad93", 0xa6, 0x953}, {&(0x7f0000001500)="cb81ce67ab75400168365859a39324936e1ee57adb3a400e965c28b0fbe8ab44", 0x20, 0x1}], 0x80000, &(0x7f0000001700)={[{@fat=@usefree='usefree'}, {@fat=@errors_continue='errors=continue'}, {@dots='dots'}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@nodots='nodots'}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@dots='dots'}, {@nodots='nodots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'threaded\x00'}}, {@fowner_gt={'fowner>', r4}}, {@uid_eq={'uid', 0x3d, r5}}]})
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000400)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast})

[ 1781.107429] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:28 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6000000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:28 executing program 2:

[ 1781.336732] binder: 9974:9977 transaction failed 29201/-28, size 0-8 line 3147
08:40:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(r1)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000000)={0x2f, @dev={0xac, 0x14, 0x14, 0x2b}, 0x4e24, 0x0, 'sh\x00', 0x22, 0xffffffffffffff80, 0x7}, 0x2c)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:28 executing program 2:

[ 1781.527723] binder: 10120:10155 ioctl c018620b 0 returned -14
[ 1781.594062] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:28 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400, 0x0)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00')
getpeername$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000400)=0x1, 0x4)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000440)={'nat\x00'}, &(0x7f00000004c0)=0x78)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000280)=0x14)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400080}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x98, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r4, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1781.712870] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1781.875358] binder: 10120:10192 transaction failed 29201/-28, size 24-8 line 3147
[ 1781.981204] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1782.080799] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1782.143484] binder: 10197:10200 transaction failed 29201/-28, size 0-8 line 3147
08:40:29 executing program 2:

08:40:29 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6800000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, <r2=>0xffffffffffffff9c, 0x0, 0x4, &(0x7f0000000000)='@)%\x00', 0xffffffffffffffff}, 0x30)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:29 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
socket$isdn(0x22, 0x3, 0x31)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:30 executing program 2:

[ 1782.741094] binder: 10365:10377 ioctl c018620b 0 returned -14
[ 1782.791353] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1782.853107] binder: 10379:10414 transaction failed 29201/-28, size 0-8 line 3147
[ 1782.861123] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:30 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000240)={@mcast1, <r4=>0x0}, &(0x7f0000000280)=0x14)
r5 = openat$full(0xffffffffffffff9c, &(0x7f00000027c0)='/dev/full\x00', 0x200000, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10000000280, r4})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000380)='./file0\x00', 0x0, 0x4c83a6916d58a842}, 0x10)
r6 = dup(r2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7})
ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="000329bd000600040002001400090008000100090000000800020081000000"], 0x1}, 0x1, 0x0, 0x0, 0x4844}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0xff, &(0x7f00000006c0)="94d41e1204f265ec56df05864eadeb4ea9c4d834152859b427f6da9509c996c6b098007e6141093b6cea50652d3a5c077cfc0e7f01e92e6ec5de3fa060a72107a78e4b14d4e2710e51604f424df608bd27aae1b64d8f4f1cb8f07dbc283b2dde0ed2ad763a2da1a49f1748d82e4e18e3e2ae883867a63f695ce9e4858bbdd9180f42c2c9f757a393b2bdff26eb972da6eedae24c28c97cd36c3ff89ada0caaf1aab8c63d1484bbd90ddd8911a2a5323fd23d8d7f1ff52f200cfba3351e8cd4d879a3ee04fb4245cddeb8079da0deb6341ee01a42f8a2d537707b0405a012ee29a888d0050402ea60346963ecf19c45ac413430f6aa827a8ac6405fb53b45d40553ea89d1c0de39d7cb622968f3e2c9e1fe1c51ce57297b0718c2c9670399f095fbe45253ca342ad6a0a20a1a701ee86767d782c39c6732e2499d64d0cfc50c20c0b5c140917ddd7fa9e4de8de6e3fd379939f5903c5f1b2aba6e986f101816e53738b1bfb3f042eeace1feb343f19e435dcf648e521079d27354f1bcbdd8dd82280dd28a1d7e9aa375fb06df6148bde2bfd5b327ddb2c0f1dfa644acafa7b8568e860c7160f0cd6027c057f58ec1e2c45385d94571bd44ccffdd5f32febeac29d263bd192ce80e9df47eb958d8ef57632ebb00eedb277b599cb47b908d06f7cf15bcaa080335674e0db7751833f7593adcab86fffd587f82a207cad901c11932fea2421e5a8041eca7508dde3b407e5332a594a4d12c54112622e7c36e18862dfc0859c4a8387f402deb184196386de3f8803b785387b1b892306b7c4d5cf452769aad73d23e1476793ef9568a84d919d62e44f23cc649b4ca30090e6665e2920cb84bf983a14b710abff5e61dfb66c0aa106cc7e70ca469e48776087cdab74edc5d4dc5d05b4ce6bcc3ba1ef719e05a7f378cd4744ced5f82b59c6686825065710bea870a4fc012512ee892a3b765e0016f3c5a01b00d8550a57d8031bba0f19601fb14731262e3e348b58d8016a18fd75b9c25bf6c526a86d8034415b10766a5f085f7467eba2d169bda6728bbace6aaf808d2d18008d48e06524f25dee803f2a3e89a83b8318d602c196d7e3301eb708c2262138aa04ee74a86ac6b1019f7f721aa8fe617fa32c92dc088a2254ca40d174b52677e6ff0bb32f0b8548462166cc885407b3ee8e622f51d5c1992083686a69057f54cc8dab6d8f3359c5f892d035f0004d1759d1417f499fcf13046e0ae5e86a222fea96334d327f8800d9161a4fc6337fb11e2450cefa1e72664411e265e21e92d033d968321948ae4043aa10f40781e5252cb96436042824a83baea9e669b27e625797b81ea9ef9aaba9d9c19b22fef4a439eba664e58c071cffefdc0fa904d24ece5d538d40572665e98ca9daae6b9a45910c7668db8658dd394c73c581862a9066f9ad45b48890fe0113b6cb66968c39fe03094e5fbe01108a33c89cce85a58c785306ac05e172b2b5cd34f2da54f4b212794cda1a35e9bc27347b3f80f85b7617096e645be4d8f99f46261b71f4e87cecc7da8314a24afaebf3fc1f2c88398fac08aeeecce1e1d33c507d8c9c4ebd737396f2b43b72f751ab3bcd29704d2302586c437ffb80714785d42e908232edaa23ed64e4c15be31eef18ae2e075b6bfadca7576776cef431ab7b7b9d3d2f4274179b7d47d771f0ebe1d10d05333b4e49c0796c74d6fa9e82c16c7a2ea5f1ec93296843a76d0bbf5107a47ad857a16fcefad8241dd56d59a281ddb5b0ec060a870d3a299f2f3fd8c47b817022a7e5a0591b9927d02f33ee8dd3805d226e022b16a19c0c9bdedec4174c112aba9106a19d12430d511662c9cb2f9393e84e05b6dbaab6879204ddf2dcdba342feb5365bb9d8cae6dd1e6b910a328193738f05503718f8732c0ade6083c7f9e5a6989f1cf90a25b83fa81700398b2b1e2aa8d4b3cc98721b708594d521f1f3593fa2cd876778620bab2f022408e11aadd7c27eae92a5750f2f8875a2c611d6b59345a8aac4a92fa083f046a4293045d526820f0f4a794ec6b93d385824c503e5e492ac740f01c2f8fc8b2137e98eb216fd057042981b01e8a604960da2e0cc426288c821d7296cb58616e51c986721f4411bd7628df34ba71e3c57d3adc4743397df8ed63e60756c32d7cd801c6e8c7587a48d1acd128fdf3c0853ec2a3c7d76b6d4ec7472be59aaa67b697a6df11dac4da985baeb78b8b7f2ed2d7fb9bb0ba34ced20448528fe33d7f93b43dc69858de15a5f7bfcb65f23b2536738da46a64724f9b9a5c730c63e27a4abdc71977ec54c3d24d91afc137417edb9279a6d43b7ecb04e513c1faf2e1151f8579aef36e63394977fa9e0c53c25e108be4b3d5c4a3ed01de4c5ac13e96b14517f421c37e227983e25979c73b2b5364b41802d2c5501bebb8eab53282d83ab2f1b847532908233502ff7a60487346f8272d3254bdb973a28829b046e81d42685ed93771f5cc495767255b48e5176d1f9f3fba1055ffbac77c23f354ab31ded20997f19300160b71202fdd9ddbd33a4d8b961ed6b81b8b2e2c6db368ef4a62696d6ad86b69c1cb8c17f9deaf20107b23aba82026be603ff0954a5c3acd69d6036dff19760cc9f52f7b751cf429d5317c1ffbf6de9a825d70ab89795de2f52f641f51c6aa3c8b52724d057534d621d0678c31892c2295652eec1eb5e09749a7ab784573e013bf5e26719fbe2a74132ff54d5234e2225ab69e0415864c7925a818212f0dcd0dfd93420550dbe1f3ff43974e5374bf1de8ac6b5273fbd44a35acc4674dcab4b470dd66288272d7e98a32880410d87ce62334fbab7a869b1afa636938b63fdd3239e05e8bb3810038e0a59d95bff6a2cb2a27d303b2b75651241cd86233431863bd1faabc24b7dfc03f04635555e830f24a41d3b2104c0c2da4854ecc2381404688729058ae1ed2f35094c3439c769d91924e4ea98a90a908827fcdec321a3f6bcf1eb519747f16acb12e533e49475db08ac2e393617d72b85752097de6e3bd3714ca2e1d7cb27651a27a6d27c3199d16aada1aba78ea10df3ed7670d6b4363f1fc2ec0dca3a9415fc51b7ea713f52d14e192636fc42fa167f3a6e33214eb8cc13700ae5ecf7a79889f5b1ca5c699723f5c982e9f785d3fc46e4a005f68ca6014e1bbfafc02343315c9113f3d0d2206327f74c37ae97d65b8ffaab701b30346df206dacf64986d95d790bef4dec8c0380203bbfaae674c096e926bc91b68374c545ad092c7d7af282a588d1f0640509697ea9d89572563ab8faf1f61c9ca81138157f43d32c709480739cad7bfe783ef9ba2afbba08f407f036b9f29c7b0e6c69dae9b67305d275c175a11f0da7436f3e25979ad90cc92b478a8437ea30dd4774bcfbe21270ff5846f2a4dda09cbd9bd8c243f69cd1e5a2c1b40ce8d8002e835fe237f11499280b215b61830f2d9201c430edc30b38dd77aa35c9897ec18902f70a100dd98bb85877996fc6df28f3850e1ea8ab38d72d5c6eb8037b6e6b70d6fe92cfe53315ad336094d5d632e894ecf57a0fa718b2e2cb7cbc758984b0ed35c690a6e6623813f178e8f4f80a369626a196bf71c17c9600ff06912d1e5ab999001463411086c767bfda81750f0576a15c72b1007c2852c4282e69f01ebb19ba7947e5d15b084940c4eb82f607f4198f356c112bbe59c88b8fe4dcd464bbdbab78d919b6ae3c092de795d34eb2931ed99691aded682b5c249ade4e045251c0a62d5ed054bf91ec896a4cedd98cd360cf91b590aef25f7d2cfdcc41700021dc04244b539ba4bba3d8f2567750854e9dbf16ad30e07ca443308da1284db52a6dfdd1e2e506378b4f8928d88807d3c51e3a8cb9eda36f56fe70afc9a2edacc3e62a9ad84dc528ea4e7efee9252a3e88098781d8ac895e1e268c7138fce241754c85e8233bec4ac2f34191983b1d9c7ade021658f416aa92da7be41ecc270df5c2575ea1451d413bf51f9f5b2337f3b8ccf8f6994202ba6dc68cd60adae1ded9658b82176cad02b15c688e3a6ea6fd40c24b3aee0a5fbbd86d02406fa284a90a3bf9b0a2190775443326049bd32ac0f0be5ccbb499c39c23fc9f170e5264053507e41f449ada6be21edec922af3f69585b2925d73665c716cba5835c430a7535e598e511f963db63f3fd9f997abd6f7960d5bf4f470da499c2930eac4914cb93bb0799ff64a3e64f1a04a62fc036f5f89aac23697dbf1301b69613ac107337b00d92f6889bff136eaf446353a6428a6a5fbfedddcfe9960d8d10320ad2fd2a6c0b6869b8cac122872947e7d2bb0c10d47611b6d6e7462528399e775a21bade267dd50c2766cda163ea511454e4ab50007bd175064c7df56e9764d7a2d691a2648fca8bc57e751867a02721abe00cca72c65b0692bf8460e57dd82504c3f357ea7588dce0d46d98cec9e6ea3467adba3f31dc8f6f14da840c44322c95c8f2857a89bf702ef5a94a648bbc79988461697cd66456d0451702bda7470d3313cdfa8212d5700ba9916d1156909006524afe8ec51b05f73db7bda3ee83e17c6ede784a24d9afd806f649adc6aa29e2fafba7ea6d529847edcdce4373b4e3f4331388b59fc80af3bd3c50008a20e301859d4797809f4886368e5e909aac11a4c4a764676e830b407974a43ae68066aa5b574cc72c21169999466565b8b6e8102071367ed248f49bdc1fd274b16177ff62f57ffc60098ff9cad523a0d49a1ab642916e372a15aac3cc756843ed964dfdcd151aaceb10a3384edc933ef3125f1d8e228117f8af7f417e094654270e716021606e35ed8ce1d0f77fff7249ae05b65c74a37c978f7ed58d5516792be48d50ccbcab52727f58b231af1610f161c65479623bcf07597cc37e48c85e2536817bd9100ebdcd4dc37b6a646adb149600338afc55398775bd1effb2fcf1c9f21eb5a72fce36a6f08e499ca219464dddb87b460031afce8d96322158b0ed213dd792339c6be3dfc49f415885521ca50e7d260bfbd22c2f66b141ea11f1528e3a468b613321c43d2ed2524e1e0d66cef52cafbf26eb08cfc6217a3d8095806a5ee5a946166ad02af5b1715bf020880bc50e877399a68d8f57912bf9de43d2e537edc1f9ccfbcdf718f379ad6382f5531fa120fbf781251555c86ef97163bd85dae51b299ef6f828ae856688a43180f29e68931a0087eb0bf9b3479d98e2eac35d02e962ad751e4e0d96cb5282c4adde028664e16f203a1dfd44d6284917b737120da66044d5022b0eeb3b48de2d46374a3a456f30fb8445a92d98e9033233c1fecb68e1453c861617e5d2f883bf4123f688e7a82ca958f6171f84f2e607a502c6763dddb07c0814255ddc4a241658342f70ea602e1f7eb850cf48d3c696a9ad3615cf700a899847355eeef9a8b5dfd66fb6b46ad97e459eec06d84897cbd311f7d727ab6711595a670d0f480cc309344d5319bccecb099934e96fadacf0aba9eec79324ba31262cd7dec7b9586fdd7ef6dcb2695d336a5102586ced519d6975bacafc7747bfae472bef62b45fd71b736eea058c601cc8411c4a62865a18e3e2699eca889afde8f49af27e1cc039b684de14457bd1e4a033f8d06240bbc5b1442cff5379fc1c0c4bc03593b3bc870ac997309bc9e25bceb1aa4f6a458f335454a8ab5ca5dd66e81026792518e9757ce1c6b528dc84c1d31695ec72270efdea25b14655a3537e1cd74fca503409f6f806c81bf09f1880846190e9dc2413833b8eb5ab4afa6eebeccb7ccb3aad3da1aa40ad699fccc544110e0553", 0x1000)
r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0)
readv(r9, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f)
read$eventfd(r9, &(0x7f0000000140), 0x8)
sendmsg$nl_generic(r8, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0)

[ 1782.917121] binder: 10365:10377 transaction failed 29201/-28, size 24-8 line 3147
08:40:30 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x200, 0x22000)
getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:30 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000002c0)=0x2)
r2 = socket$inet6(0xa, 0x7, 0x1)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={<r3=>0x0, 0x5, 0x6438}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x4c, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x8f63, @ipv4={[], [], @remote}, 0x100}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@ipv4={[], [], @multicast2}, 0x7, 0x1, 0xff, 0x4, 0x831f, 0x265}, 0x20)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:30 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x6c00000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000480)={"e76ff8d95c3ba7a7bd9d6778ae2ff67a41f3108bc6edd546dc45f084a4b4cd5ec8483781ea4ec28b8bba9e19e22eddc91fd4eac4875afd72df6ba7087696f2948dc1e0571d18f03985a2a0af7f18164a018d1ca5ad869523f95dcbcde12d366df31074ce5d0e4940cd60e3e5b98047515de6f5d7b50b3398c292f47f8eb0aa756c88f9ab17e0a1a2c4279b0d1cca4ea6467df97c9e09c7ef15d191592d08d332e46dd97926559af70aca0a9f5df2de198c4b6950e068496629986ff58b02ae2028793d259aec5ff5174db243ec712d5acda511abbef87d05060fb0179cbb46dbee2b08407cf20ad37aba7d817f22005fe2feb9c741ee8b8e9b6d04a39fb4041a8dbe56483055818eb82f20a3a98b76e3071f0ce61f1c11d029a046446168d802a791848c1ef3061888e855c67252c9ad2e2cb576d6be7d355f5f7043a097e8468569f02dc3f807183173dc4ae1ef87fa0acc8382ddd6fcb4ae959e43f96fc49be4af2e87d1aacdbc0a1e89756df3318a20e58365703682367edb575d7f4518f1bb5c74ac54e3ee1d0e921fd7f608a2c6ab3d47b87c305f946d10459697b2dc9c862f30a5de0de0af71880592c8f056ed1b48d74d76410ecf8c32077ff4ae61ae781f943e8160878a336de81946fa6149c3ff028063cfe6a025f6dc89272afd4f216e2b499036794546e7755208e944cd88476469fbce566fc76be264f3c119ea2c690273063ba6953f5d8a26bbba7afa227cb96cff4fe30512205816b796551dcb66161f883597bb0f649312b0b0ef1973b7edbe8560e8c48dcb80c82fcd6c70c54fcd7dbf34c8a8f77b988647b5c80eb396952ea572d0ca12232e395cab5d6f6a02a6dfbd857eba52160d4d73f0ea068ef43af574a7f0aa01fba22e2a3b51fad257676db332c20df11cf43a8c5c0e37c5a521fc075155cd89b59b966de89c30888b9565d06c6ae4370ebfc4afaefcdd2aa2d4de2b7330d90d3c56e6c0fe5d4afd8f16345bc082dc306f18c1003b00be946df64949b5f9491c28ed77caf070ced1bcaa19610471aac8c104f95475d043cc1beac95258258f16d840a35bdb1c293b61c08bbe95c56039d10a4056d2daa53695b9e2dc50a1cf2eaf53152869dba2745fa154585f45fb52c4634587e5f122c3dd11d417053b9ecbc07c30cef68bde447bf76ab09034637f0b4c00ea302d4e6e7e160f6c4bc36316fb1e383a4bd055cc09dec584270089f933c7d8c4d28f658f76e9c6fccf55a85b985a6fb64bf39197138158e87bbf789357c21581f3e9802687ce3d2c3167216d615f95d274a394a0b6d3e4f40e69864065007c85f5e3a7fd0b0e723bcd20187ad551b9347449e08c5829a588f92f3bf897b2c4daf1897d2f81f5876bdef600b787cd9706182cbb1b091a4a2c38d207db3b00e37f6db61b0b1975264ac099dfba0d589bab301156"})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1783.279550] binder_release_work: 6 callbacks suppressed
[ 1783.279558] binder: undelivered TRANSACTION_ERROR: 29201
[ 1783.332638] binder: undelivered TRANSACTION_ERROR: 29201
[ 1783.495293] binder: 10484:10568 ioctl c018620b 0 returned -14
08:40:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1783.566147] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1783.688593] binder: 10484:10568 transaction failed 29201/-28, size 24-8 line 3147
08:40:31 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000001c0)={0x0, {0x0, 0x989680}, 0x1f, 0x9})
ioctl$TIOCSTI(r0, 0x5412, 0x9)
syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xff, 0x20800)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x80001, 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x2bb)

08:40:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7400000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:31 executing program 2:
mknod(&(0x7f0000000100)='./file0\x00', 0x103f, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0)
clock_gettime(0x0, &(0x7f0000000280))
timer_settime(0x0, 0x0, 0x0, &(0x7f0000000300))
seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]})
syz_execute_func(&(0x7f0000000240)="0faef24029450ff3440f1157f191b4b4aaf4c4610dc2900400000089150f6323230ff7c6")
perf_event_open(0x0, 0x0, 0x40000, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
tkill(0x0, 0xf)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
timer_create(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6(0xa, 0x8000e, 0x3ff)

[ 1783.794071] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1783.806482] binder: 10689:10731 transaction failed 29201/-28, size 0-8 line 3147
[ 1783.824357] binder: undelivered TRANSACTION_ERROR: 29201
08:40:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc6adf63000000004b81854113841a12a314250000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="d643dfecf1c08ec7"]], 0x0, 0x0, 0x0})
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0xd0080, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x620, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, &(0x7f0000000100), &(0x7f0000000480)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x15, 0x2d, 0x0, 'bpq0\x00', 'batadv0\x00', 'ip6_vti0\x00', 'gretap0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0xc0, 0xf0}, [@common=@log={'log\x00', 0x28, {{0x4, "77d26ecc1c9d3ea6a07e4592b5a5d0ed7ad2074aa80d3bf947daed3c080d", 0x1}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xff}}}}, {{{0x1d, 0x10, 0x8ffd, 'bpq0\x00', 'bcsh0\x00', 'syzkaller0\x00', 'gre0\x00', @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff], 0xf0, 0x138, 0x170, [@statistic={'statistic\x00', 0x18, {{0x1, 0x1, 0x9, 0x6, 0xffffffffffffffff, 0x6}}}, @time={'time\x00', 0x18, {{0xffffffffffffff01, 0x100000000, 0xceaf, 0x2774, 0x80, 0x5, 0x1}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xffffffff, 0x9, 0x471}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x9, 0x9, 0x993e, 'caif0\x00', 'irlan0\x00', 'ipddp0\x00', '\x00', @remote, [0x0, 0xff, 0xff], @local, [0xff, 0x0, 0xff, 0xff, 0xff], 0x110, 0x2b8, 0x330, [@nfacct={'nfacct\x00', 0x28, {{'syz1\x00', 0x4}}}, @nfacct={'nfacct\x00', 0x28, {{'syz1\x00'}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x100000000, 0x0, 'system_u:object_r:audisp_exec_t:s0\x00'}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x9, 0xf, 0x9, 0x0, 0x0, "ef6f1cc2ad963148bf1f267badc6d5f76cfa323278fd0d3ec655ae269708559872cca25e7f843ec3b8b898390e398cc7bfaa54c832288997e90422c9d0d50e3d"}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x10000000000000, 0x3, 0x59, 0x0, 0x0, "d0cd6bf824f8f1b77d201214995906647d26b371d2b794167f7603f898be5eda085a5a364aa8ea943433977c07e7314710b482ec6030248b2d50efd3278dae78"}}}}]}]}, 0x698)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1783.850565] binder: undelivered TRANSACTION_ERROR: 29201
08:40:31 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f00000002c0)='/dev/snd/midiC#D#\x00', 0x21db, 0x0)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/dlm_plock\x00', 0x4000, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=<r3=>0x0, &(0x7f00000001c0)=0x4)
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000680)=""/127, &(0x7f0000000000)=0x7f)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={<r4=>0x0, 0xffff}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000005c0)={r3, 0x0, 0x80000001, 0x8, 0x1, 0x100000001, 0x1, 0x557, {r4, @in6={{0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}, 0x80000001, 0x7, 0x1000, 0xfffffffffffffff9, 0xae}}, &(0x7f0000000280)=0xb0)
r5 = syz_open_dev$dspn(&(0x7f0000000740)='/dev/dsp#\x00', 0x7fff, 0x400200)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000400)={0x9, 0x0, [{0x4, 0x7, 0x0, 0x0, @sint={0x1, 0x2}}, {0x6, 0x7, 0x0, 0x0, @msi={0x0, 0x81, 0x391}}, {0x6, 0xe44165eed6499537, 0x0, 0x0, @irqchip={0x7, 0x7}}, {0x10001, 0x3, 0x0, 0x0, @irqchip={0xb5, 0x8}}, {0x3f, 0x2, 0x0, 0x0, @irqchip={0x4fb, 0x401}}, {0x9, 0x1, 0x0, 0x0, @msi={0x29, 0x3f, 0x20}}, {0x9, 0x0, 0x0, 0x0, @irqchip={0x200}}, {0x0, 0x4, 0x0, 0x0, @adapter={0x213f, 0x9, 0x6, 0x8, 0x7}}, {0x0, 0x7, 0x0, 0x0, @adapter={0x1, 0x3, 0x1ff, 0x10001, 0x5}}]})

[ 1783.899049] binder: 10751:10758 ioctl c018620b 0 returned -14
08:40:31 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x20000, 0x0)
accept4$packet(0xffffffffffffff9c, &(0x7f0000001ac0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001b00)=0x14, 0x80800)
setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000001b40)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r2}, 0x14)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'veth1\x00'}})

[ 1783.961012] binder: 10766:10816 unknown command 128
[ 1783.968549] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1783.968559] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1784.017470] binder: 10766:10816 ioctl c0306201 20000440 returned -22
[ 1784.032160] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1784.099066] binder: 10751:10758 transaction failed 29201/-28, size 24-8 line 3147
08:40:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x40000)
ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000b597f2237a0066ca000000000000000000000000000000e9000000000000000000000000000008000000000000000000000000000000d56c0ddee8371dba590bce25fda3c35b1e00ff056bda2a9f7f42041c160691a873611fa78bdc7be04d9182d8dd7f97b9189ca680f0d66a1df135355c2e15511b8410a67d6f127ff4aab02b30df9dd1de40bc4ab40f37462e7bc847c3748293f706f24bd7c997491d9aa1475ad779b45e24137e7da86f7090896cbb26f1d1b5ddc48fe372b88f586596ef713865caea2d46c9d9002ff55e35afa5266c344d4305bdc85516b9d44af113067e9bb07dd9faf23196c10321e5388840f6c83d1bb4c65eb20da57106c5620a580b7d69a5dda89e5317a61d9f50dc23f64ecf0edb3124fec44ad284bdc001a81e1c59d87f32859ea2157ad40859b58219dc47cec2", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000280)={0x270f91f6, "41f0202da9cba2e0bef25dcf89ed3acaf717d72ab95ec819a154ae0670047ae2", 0x2, 0x80, 0x5, 0x420000, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:31 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000180)={r1, 0x10})
setsockopt$packet_buf(r0, 0x107, 0x17, &(0x7f00000001c0)="dd71bb395a14c64c61a8bc3e50b63ef98eaa34692169f105e7e67f2873b74922a35d2a08d0f39891e4f5fcb64216c31e026df1a562ffcfc178e8b99e03720a68e2ed2f442ed6025787d8f7bc50f79f20842ea4714855122ab9ad8e5ba6a93519ead598d4508b452f0df041454a59180a5f1866c16f1e160694a7eb08021447152c7a331e3eb9bcc0c9340b06dfb785e1926cbd89a7ed9d10a2ba15268412dcc20a352f5e72263e31cdf2e7b1797432687fd63f859442a1048f97f9e08c2a3acf6232e97db34a97dfa79094d7db9d66ae7c6e92c3b913767cc90b10a14262ebf943181c7d4e622f98e26c83f2d8cff78b4de9", 0xf2)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:31 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x7a00000000000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1784.257755] binder: undelivered TRANSACTION_ERROR: 29201
08:40:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc67a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getuid()
getgid()
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000340))
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400000, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0))
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000240))
sendmsg$netlink(r1, &(0x7f00000007c0)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x30, 0x2f, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@generic="e38eb1066d77031847e901b82baf5513a38dbce90e32fc142b52bca962"]}, 0x30}, {&(0x7f0000000440)={0x24, 0x41, 0x8, 0x70bd26, 0x25dfdbfd, "", [@typed={0x14, 0x46, @ipv6=@ipv4={[], [], @local}}]}, 0x24}], 0x2}, 0x10)
listen(r0, 0x5)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98)

08:40:31 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @loopback, <r1=>0x0}, &(0x7f0000000080)=0xc)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, r1}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x1, 0x0)
write$P9_RWALK(r3, &(0x7f00000001c0)={0x4a, 0x6f, 0x2, {0x5, [{0xb0}, {0xc0, 0x1, 0x4}, {0x40, 0x4, 0x1}, {0x38, 0x0, 0x2}, {0x0, 0x2, 0x4}]}}, 0x4a)
sendto$x25(r3, &(0x7f0000000440)="b601db815208f7", 0x7, 0x4000890, &(0x7f0000000480)={0x9, @null='               \x00'}, 0x12)
accept4$packet(r3, &(0x7f00000002c0), &(0x7f0000000400)=0x14, 0x80800)
r4 = fcntl$getown(r0, 0x9)
sched_rr_get_interval(r4, &(0x7f0000000280))
syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x4, 0x8000)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000004c0)={'\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}})

[ 1784.395350] binder: 10960:10963 got transaction to invalid handle
08:40:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400201)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1784.772882] binder: 10968:10978 ioctl c018620b 0 returned -14
[ 1784.791201] binder: undelivered TRANSACTION_ERROR: 29201
[ 1784.837359] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:32 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x400)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x111, 0xf}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r1, 0x4a, "cfa55c", "de0996aa8d001e1b944ee42a9865aa201473a3cfcd8063d2fe1397ca5efc5be983bfe6d054a76c3e04f58321ba43a12d063da86f7adb7995f271ede6779272a246d4a91ac1f1688c773b6a8c5663d8a0740f6c05ca405ea832eb75d30221adc538ab67afd12be4930d4a9cd53d5ec81f7bfb2ee21d92eeb67276db1d80d182854362497ff242075e1828b6a7c5d5a2e760189eaf71b73f035a7dacc22e65088d7395e90383644ec8234488bdd46c8d328d4d62a67f2a5f87daab1e72d7189bf77fc97c193fb786256ec98835ed3603a7467cd45cdf05c1bc3120e0def810481820f80d4b5c2230496ed53773b5623c462d442b1f6917c6fbfb61e03052761c4c"}}, 0x110)
mount(&(0x7f0000000400)=@filename='./file0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='affs\x00', 0x20020, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1784.988628] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
08:40:32 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0xfdfdffff00000000}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1785.063071] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1785.077520] binder: undelivered TRANSACTION_ERROR: 29201
08:40:32 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0xfffffffffffffe81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x3}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1785.151350] binder: undelivered TRANSACTION_ERROR: 29201
[ 1785.160289] binder: undelivered TRANSACTION_ERROR: 29201
08:40:32 executing program 2:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0)
close(r0)

[ 1785.282985] binder: 11279:11289 ioctl c018620b 0 returned -14
08:40:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
sync_file_range(r1, 0x44adff86, 0x2, 0x3)
fstatfs(r0, &(0x7f0000000480)=""/178)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000de76db59ae8adeaa76eb4cd3b5540d786228ab1a122d21b9f885f066db0d9ed06c2a2790aeadb3643289fc6a9dc51dee898677a87097444153681513092cbd5d80ae75ae6bb1ca8db142f97d9733c14b106449e56658dcc5b683355b3dd02b51b2df7428c434c71b3a06002916b5416ae498571a070d9b420d4952e919b5228c7dcda117", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1785.446723] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:32 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
fcntl$dupfd(r0, 0x406, r1)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x8000, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x20a40, 0x0)
write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0xffffffffffffff23)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0)
ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000180)={0x9, &(0x7f0000000080)=[{0x8, 0x9}, {0x3, 0x5}, {0x2}, {0xd5, 0x1}, {0x81, 0x4}, {0xff2, 0x5}, {0x7, 0x745}, {0x2f, 0xdf}, {0x401}]})

[ 1785.766458] net_ratelimit: 24 callbacks suppressed
[ 1785.766466] protocol 88fb is buggy, dev hsr_slave_0
[ 1785.766501] protocol 88fb is buggy, dev hsr_slave_0
[ 1785.771498] protocol 88fb is buggy, dev hsr_slave_1
[ 1785.776505] protocol 88fb is buggy, dev hsr_slave_1
[ 1785.781575] protocol 88fb is buggy, dev hsr_slave_0
[ 1785.796604] protocol 88fb is buggy, dev hsr_slave_1
[ 1785.801704] protocol 88fb is buggy, dev hsr_slave_0
[ 1785.806802] protocol 88fb is buggy, dev hsr_slave_1
08:40:33 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00')
fcntl$setlease(r0, 0x400, 0x2)
r1 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x902)
write$FUSE_BMAP(r1, 0x0, 0x1f4)
pipe(&(0x7f0000000180))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070")
creat(0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000340)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)

08:40:33 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x200)

[ 1785.896979] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1785.906895] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1785.906911] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1785.926026] binder_transaction: 5 callbacks suppressed
[ 1785.926041] binder: 11301:11316 transaction failed 29201/-28, size 0-8 line 3147
08:40:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
pwrite64(r0, &(0x7f0000000180)="c9e0d4d8904290a0b17c2417d05a46111523cdeaa1fb687e0bbdf26bccfa3f2f896b2185a84bbfe744441bb07626ad630629580925605256cb6b806b8d606e77942c0f255dce9a4bc52da32480bda71077f6853d38ee125da3570423e01c56475c211e947c254512", 0x68, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="00000000009636b0c0301f98000000ba267cf772db706e0b803d94193c23c92360e68a14ac3888c4dcfa2e8792c943c7d402221253dcfab0fefff9b5cfbab215d91a9558c0ea053040aa6a24d4d333340e3b882bced180ea4ca36666e693"]], 0x0, 0x0, 0x0})
r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x400)
ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f00000000c0)={0x0, 0x5, 0xa2ef, [], &(0x7f0000000040)=0x1f})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1786.022334] binder: undelivered TRANSACTION_ERROR: 29201
08:40:33 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:33 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x2}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1786.162522] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1786.170609] protocol 88fb is buggy, dev hsr_slave_0
[ 1786.170669] protocol 88fb is buggy, dev hsr_slave_1
08:40:33 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={<r2=>0x0}, &(0x7f00000001c0)=0xc)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xfffffffffffeffff, 0x5, 0x2, 0x80, 0x0, 0x8000, 0x90000, 0x8, 0x8, 0x9, 0x9, 0x41bb, 0x6, 0x6, 0x1ff, 0x7, 0x3, 0x7, 0x1, 0x3, 0x7ff, 0x83, 0x1, 0x5aa3, 0x3, 0x5, 0x6, 0x1000, 0x7f, 0x3, 0x1000, 0x697e, 0xd77, 0x3, 0x9, 0xeda8, 0x0, 0x2, 0x4, @perf_config_ext={0x3ff, 0xf67}, 0x500, 0xffffffff, 0x200, 0x6, 0x10001, 0x0, 0x7}, r2, 0x5, r0, 0x8)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0x3cc7)
ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1)

[ 1786.314821] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1786.387268] binder: 11513:11514 transaction failed 29201/-28, size 0-8 line 3147
[ 1786.681077] binder: 11520:11533 ioctl c018620b 0 returned -14
[ 1786.760996] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:34 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)="dc07bd97abe61e533aafcdc58113274b5bd4717d5d8d7637d90cb4b47f872705be8d5fe0", 0x24, 0xfffffffffffffffe)
keyctl$setperm(0x5, r1, 0x1100)

08:40:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_setup(0x2, &(0x7f0000000000)=<r2=>0x0)
io_pgetevents(r2, 0x3f, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)={&(0x7f0000000140)={0x5}, 0x8})
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ftruncate(r0, 0x100000000)
r3 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xfffffffffffffff8, 0x20c100)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x13000, 0x85, &(0x7f00000005c0)=""/133}]})
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000480)={<r4=>0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f0000000380)=0x84)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/checkreqprot\x00', 0x200000, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000580))
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000003c0)={r4, 0x80000000}, 0x8)
r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x20000, 0x0)
getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000200), &(0x7f0000000280)=0x4)
mmap$perf(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x110, r6, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:34 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1786.842987] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1786.866667] binder: 11520:11533 transaction failed 29201/-28, size 24-8 line 3147
[ 1787.056312] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1787.209107] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1787.257798] binder: 11794:11814 transaction failed 29201/-28, size 0-8 line 3147
08:40:34 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x3}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:34 executing program 1:
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffff000004000080000025000000030000000000000024cb2dffffff53d981d767dfde26537f00000100000409000000074640c59da19c355bd7145b4da60711fd6d013764b4beb7e8e12bc2ca124368f5b2523860fbdc2dfd49cad27e5845e3d44d59a566e9f8c1897b7e79a50234576a9fd27815cfe73493f7b820c7e29968ff2e740ea18b6e5f1f4b5a74e6737be75b249f86f55571b3de5ddabc2fb55a03835f0f9068c977486dabb5f7743fc63f2eab4ad78eb6de25c94b45fcaadce3051cf8a524f748485e84358e29cd70e380daa44c365652bafe412e98e8da4f1da79c4b5a1dce3ec1470ff17707b1324e52927c671c998877359c8a7a53a7d344e5f9173a8a25fecec9c48e9872f8dd9e4ed9a7ba932e8b85ace1b9c640aa36f3ba5d71f587385f49262f8d92b174236c"], 0x28)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
statfs(&(0x7f0000000280)='./file0\x00', &(0x7f0000000100)=""/252)

08:40:34 executing program 2 (fault-call:4 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)

[ 1787.595039] binder: 11843:11844 ioctl c018620b 0 returned -14
08:40:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x12000)
connect$bt_rfcomm(r2, &(0x7f0000000040)={0x1f, {0x55a0a8a7, 0x1, 0x10000, 0x9, 0x7, 0x7f}, 0x1}, 0xa)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:34 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
socket$unix(0x1, 0x7, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x100, 0x0)
accept4$llc(0xffffffffffffff9c, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x10, 0x800)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cachefiles\x00', 0x600, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x80000, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x100)
r0 = syz_init_net_socket$ax25(0x3, 0x54f4637bf25b0e92, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20000000000009, 0x807, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892})
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x460000, 0x40)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000540)=""/229)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x02\x00\x00\x05\x00', 0x79})
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
unshare(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000500)='./file0\x00', 0x800000000)
r4 = gettid()
clone(0x2106001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"])
ptrace(0x10, r4)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xfffffffff37608fd, 0x1)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x1)
syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x8000000000000, 0x410000)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x37d, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=<r7=>0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000080)={{0x40000000000001, @name="bda6e02586b0525bd1579284a19d7f2351340f736699a85d83b9686e97341a79"}, 0xfffffffffffffe33, 0xfffffffffffff0a5, 0xfff})
perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x8, 0xfffffffffffffffa, 0x8, 0x7, 0x0, 0xfffffffffffffffd, 0x1800, 0xe, 0x1, 0x9, 0x40, 0x3d96, 0x0, 0xfffffffffffffffd, 0x4, 0x4, 0x85, 0x1, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1000, 0x1, 0xb1ff, 0x0, 0x80000000, 0x5, 0x6, 0x3, 0x9, 0x6, 0xd9, 0x20, 0x5, 0x0, 0xffffffffffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x140, 0x9, 0x1f, 0x2, 0x2, 0x10001, 0x4}, r7, 0x8, r3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0)

[ 1787.674881] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1787.682905] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1787.692290] binder: 11843:11846 transaction failed 29201/-28, size 24-8 line 3147
[ 1787.751691] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:35 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x40)
ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080))
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1787.801430] FAULT_INJECTION: forcing a failure.
[ 1787.801430] name failslab, interval 1, probability 0, space 0, times 0
[ 1787.813808] binder: 11848:11851 transaction failed 29201/-28, size 0-8 line 3147
[ 1788.342580] CPU: 1 PID: 11856 Comm: syz-executor.2 Not tainted 5.0.0+ #13
[ 1788.349558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1788.358911] Call Trace:
[ 1788.361512]  dump_stack+0x172/0x1f0
[ 1788.365159]  should_fail.cold+0xa/0x15
[ 1788.369058]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1788.374170]  ? ___might_sleep+0x163/0x280
[ 1788.378331]  __should_failslab+0x121/0x190
[ 1788.382582]  should_failslab+0x9/0x14
[ 1788.386391]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1788.391168]  snd_pcm_oss_change_params_locked+0x1a7/0x3750
[ 1788.396830]  ? __mutex_lock+0x3cd/0x1310
[ 1788.400910]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1788.406725]  ? mutex_trylock+0x1e0/0x1e0
[ 1788.410817]  ? get_pid_task+0xc9/0x190
[ 1788.414729]  ? __lock_acquire+0x548/0x3fb0
[ 1788.418973]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1788.423662]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1788.429220]  ? debug_smp_processor_id+0x3c/0x280
[ 1788.433998]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1788.439221]  snd_pcm_oss_write+0x42b/0x8f0
[ 1788.443486]  __vfs_write+0x116/0x8e0
[ 1788.447226]  ? __might_sleep+0x95/0x190
[ 1788.451220]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1788.456079]  ? kernel_read+0x120/0x120
[ 1788.459978]  ? __inode_security_revalidate+0xf7/0x150
[ 1788.465186]  ? avc_policy_seqno+0xd/0x70
[ 1788.469270]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1788.474335]  ? selinux_file_permission+0x9b/0x570
[ 1788.479205]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1788.484770]  ? security_file_permission+0x94/0x380
08:40:35 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x80)
statx(r0, 0x0, 0x3800, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x400000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x40000000})
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1788.489728]  ? rw_verify_area+0x118/0x360
[ 1788.493903]  vfs_write+0x20c/0x580
[ 1788.497456]  ksys_write+0xea/0x1f0
[ 1788.501008]  ? __ia32_sys_read+0xb0/0xb0
[ 1788.505087]  ? do_syscall_64+0x26/0x610
[ 1788.509084]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1788.514538]  ? do_syscall_64+0x26/0x610
[ 1788.516445] audit: type=1804 audit(1552120835.627:120): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir809317469/syzkaller.CqGR0t/3144/file0" dev="sda1" ino=17437 res=1
[ 1788.518617]  __x64_sys_write+0x73/0xb0
[ 1788.549507]  do_syscall_64+0x103/0x610
[ 1788.553408]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1788.558601] RIP: 0033:0x457f29
[ 1788.561788] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1788.580688] RSP: 002b:00007fe4c27ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
08:40:35 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x5)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000001}, 0x1c)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x3f, 0x401}, {0x3, 0x2}, 0xffffffff, 0x4, 0x6})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:35 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000080)={<r2=>0x0, 0x200, 0x638}, &(0x7f0000000180)=0x8)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=<r3=>0x0)
process_vm_readv(r3, &(0x7f0000000680)=[{&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f00000005c0)=""/133, 0x85}], 0x4, &(0x7f00000018c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/97, 0x61}, {&(0x7f0000001740)=""/83, 0x53}, {&(0x7f00000017c0)=""/223, 0xdf}], 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2}, 0xfffffffffffffffd)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1788.588487] RAX: ffffffffffffffda RBX: 00007fe4c27ecc90 RCX: 0000000000457f29
[ 1788.595743] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000004
[ 1788.602999] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1788.610254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe4c27ed6d4
[ 1788.617507] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000005
[ 1788.630514] binder_release_work: 4 callbacks suppressed
[ 1788.630522] binder: undelivered TRANSACTION_ERROR: 29201
08:40:35 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x4}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1788.646499] binder: undelivered TRANSACTION_ERROR: 29201
08:40:36 executing program 2 (fault-call:4 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)

[ 1788.720824] binder: 12070:12071 ioctl c018620b 0 returned -14
[ 1788.762251] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1788.781113] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1788.790763] binder: 12072:12075 transaction failed 29201/-28, size 0-8 line 3147
[ 1788.793470] binder: 12070:12071 transaction failed 29201/-28, size 24-8 line 3147
08:40:36 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1788.799652] binder: 12072:12075 ioctl c0505350 200000c0 returned -22
[ 1788.817906] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1788.828809] binder: 12072:12080 transaction failed 29201/-28, size 0-8 line 3147
[ 1788.843667] binder: 12072:12080 ioctl c0505350 200000c0 returned -22
[ 1788.854597] binder: undelivered TRANSACTION_ERROR: 29201
08:40:36 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x5}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1788.869799] binder: undelivered TRANSACTION_ERROR: 29201
[ 1788.911512] binder: undelivered TRANSACTION_ERROR: 29201
[ 1788.965450] binder: 12167:12188 ioctl c018620b 0 returned -14
08:40:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
connect$ax25(r2, &(0x7f00000000c0)={{0x3, @bcast, 0x4}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000400000000000000000000000000008ae0200000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="040000000000000000"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:36 executing program 5:
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x96, 0x500)
write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
get_thread_area(&(0x7f0000000040)={0xdc0d, 0x20001000, 0x2000, 0xa83, 0x3ff, 0x54, 0x101, 0x3, 0x100000001, 0x2})
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x490100, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='ip6tnl0\x00', 0x10)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1789.033088] binder_alloc_new_buf_locked: 4 callbacks suppressed
[ 1789.033098] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1789.131427] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:36 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)

[ 1789.176057] binder: 12295:12296 unknown command 0
[ 1789.181074] binder: 12295:12296 ioctl c0306201 20000440 returned -22
[ 1789.185270] binder: 12167:12277 transaction failed 29201/-28, size 24-8 line 3147
08:40:36 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
bind$ax25(r2, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x48)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000f000000000000000000000723c0000000000000022b22fb20800000008f5ff0000003d6b56d522c85950ecdeb638cc", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:36 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback, 0x4e21, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x2000000, 0x0, 0x10000000, 0x0, 0x0, 0x1}, {0x4}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x101000)
ioctl$KDDISABIO(r0, 0x4b37)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="3a6fb19bdf6de195efd0aac735829d41089c6264a22f4ea5d1783dd5544944868edcd0f58cc83fbe0afcd2b6b3b71d971859a16e25511fc8b46c69162a26a632470a9b2a4296e9082dd6be03f9301c1104b02fbfffb1ec65f9e292a491a01682c4ddfe5b9c01a3a8c5e64fd8bbf1ac0451b7ed53f85f66fe2dc6b1e2417af49d300fb95ed1409dad2f2174ac8033bee48feacb79918def3d4477bc6e892745aeefe8a39ba3c616097afdf0b2f9b9256be0c3ae3cd3ba40603ba6bad6f63208d3d9237ff3", 0xc4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r0, 0xf, 0x2}, 0x14)

08:40:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
lsetxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.evm\x00', &(0x7f0000000480)=@v2={0x3, 0x1, 0x0, 0x4, 0xe5, "ff8dd5efc27d3793745d97c66a19885fcd6970db37538a0c4229b65d50cc0a09ef54a05e26b173f6b8af9c6edb30d41d7847231177a39243b9e8b3f6e3cfe48d78e7edf8f8e915361b1b1331e2c881b4888c9494b7d6ac485c757cfff3aa52ca7d2066a33baa484f5df7577fc48ee005953dca06aa5a26c620a6cbd0649377003df30b81d5066eee879cfa5cac6f14d54d03fb5cc8cd20ae7ef478824ca30814f9b48ded6df20e5b36e7796b94f5abb423a8665dfa3d21049885cd9d08d2d75f2a350b1f807d37843c714617041c67e4adffbcf3da33527093b3d8d26dfec21775ecf5130c"}, 0xef, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm_plock\x00', 0x10000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000a40)={<r2=>0x0, 0x7}, &(0x7f0000000a80)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000ac0)={r2, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000b80)=0x84)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000140)={<r4=>0x0})
mkdir(&(0x7f00000001c0)='./file0\x00', 0x10c)
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000180)={r4, 0x3})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={r3})
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000002c0)={0xd, 0x10, 0x11, 0x1e, 0x2, 0x8, 0x4, 0x99, 0x1})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES32=r1], @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="000096e2dcaf1a03afaa000000000000a0e35bac9f4afedf037ebf49d3e40901cb2c2c0282ab72e08ba19745a25881716492a6a79a82350bd1e451614a3ca72ecfa7366834eec6c94b1aae16a51fcfabc42126fee01234b2b6b8cf"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1789.704222] binder: undelivered TRANSACTION_ERROR: 29201
08:40:37 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
creat(&(0x7f00000001c0)='./file0\x00', 0x4)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240))
write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0xfffffffffffffe03)

08:40:37 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x6}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1789.811944] binder: undelivered TRANSACTION_ERROR: 29201
08:40:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
dup3(r0, r1, 0x80000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1789.914707] binder: 12473:12527 ioctl c018620b 0 returned -14
08:40:37 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
socket$unix(0x1, 0x7, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000640)='/dev/hwrng\x00', 0x100, 0x0)
accept4$llc(0xffffffffffffff9c, &(0x7f0000000680)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000006c0)=0x10, 0x800)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000700)='/dev/cachefiles\x00', 0x600, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000740)='/dev/full\x00', 0x80000, 0x0)
creat(&(0x7f0000000780)='./file0\x00', 0x100)
r0 = syz_init_net_socket$ax25(0x3, 0x54f4637bf25b0e92, 0x1)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket(0x20000000000009, 0x807, 0x0)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'team0\x00', 0x892})
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x460000, 0x40)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000540)=""/229)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x00\x00\x02\x00\x00\x05\x00', 0x79})
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
unshare(0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000500)='./file0\x00', 0x800000000)
r4 = gettid()
clone(0x2106001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"])
ptrace(0x10, r4)
wait4(0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xfffffffff37608fd, 0x1)
write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x1)
syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x8000000000000, 0x410000)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x37d, 0x0)
ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000440)=<r7=>0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f0000000080)={{0x40000000000001, @name="bda6e02586b0525bd1579284a19d7f2351340f736699a85d83b9686e97341a79"}, 0xfffffffffffffe33, 0xfffffffffffff0a5, 0xfff})
perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x8, 0xfffffffffffffffa, 0x8, 0x7, 0x0, 0xfffffffffffffffd, 0x1800, 0xe, 0x1, 0x9, 0x40, 0x3d96, 0x0, 0xfffffffffffffffd, 0x4, 0x4, 0x85, 0x1, 0x0, 0x3, 0x0, 0x80, 0x0, 0x1000, 0x1, 0xb1ff, 0x0, 0x80000000, 0x5, 0x6, 0x3, 0x9, 0x6, 0xd9, 0x20, 0x5, 0x0, 0xffffffffffffffff, 0x1, @perf_bp={&(0x7f0000000040), 0x5}, 0x140, 0x9, 0x1f, 0x2, 0x2, 0x10001, 0x4}, r7, 0x8, r3, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x6, 0x0)

[ 1789.979649] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
08:40:37 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}, {}, {}, 0x20000000}, {{@in=@dev}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0)
write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0x5, 0x4, 0x1ff, 0x13, "ed767f316bcb7d43a275e029ac63e57ea809ea"}, 0x1f)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1790.143193] binder: undelivered TRANSACTION_ERROR: 29189
08:40:37 executing program 1:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)

[ 1790.176474] audit: type=1804 audit(1552120837.417:121): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir809317469/syzkaller.CqGR0t/3147/file0" dev="sda1" ino=17442 res=1
08:40:37 executing program 5 (fault-call:5 fault-nth:0):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:37 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x35, 0x100000000000000}, 0xfffffefd)

[ 1790.409984] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1790.639973] FAULT_INJECTION: forcing a failure.
[ 1790.639973] name failslab, interval 1, probability 0, space 0, times 0
[ 1790.652267] CPU: 0 PID: 12707 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1790.659222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1790.662140] binder: undelivered TRANSACTION_ERROR: 29201
[ 1790.668581] Call Trace:
[ 1790.668607]  dump_stack+0x172/0x1f0
[ 1790.668633]  should_fail.cold+0xa/0x15
[ 1790.668654]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1790.668678]  ? ___might_sleep+0x163/0x280
[ 1790.668699]  __should_failslab+0x121/0x190
[ 1790.668717]  should_failslab+0x9/0x14
[ 1790.668732]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1790.706336]  snd_pcm_oss_change_params_locked+0x1a7/0x3750
[ 1790.711979]  ? __mutex_lock+0x3cd/0x1310
[ 1790.716055]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1790.721852]  ? mutex_trylock+0x1e0/0x1e0
[ 1790.725929]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1790.730499]  ? retint_kernel+0x2d/0x2d
[ 1790.734373]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 1790.739307]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1790.744074]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1790.749260]  snd_pcm_oss_write+0x42b/0x8f0
[ 1790.753485]  ? lock_release+0x4c1/0xa00
[ 1790.757465]  __vfs_write+0x116/0x8e0
[ 1790.761181]  ? __might_sleep+0x95/0x190
[ 1790.765148]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1790.769975]  ? kernel_read+0x120/0x120
[ 1790.773857]  ? __inode_security_revalidate+0xf7/0x150
[ 1790.779049]  ? avc_policy_seqno+0xd/0x70
[ 1790.783101]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1790.788110]  ? selinux_file_permission+0x9b/0x570
[ 1790.792958]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1790.798494]  ? security_file_permission+0x94/0x380
[ 1790.803423]  ? rw_verify_area+0x118/0x360
[ 1790.807574]  vfs_write+0x20c/0x580
[ 1790.811177]  ksys_write+0xea/0x1f0
[ 1790.814704]  ? __ia32_sys_read+0xb0/0xb0
[ 1790.818762]  ? do_syscall_64+0x26/0x610
[ 1790.822732]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1790.828092]  ? do_syscall_64+0x26/0x610
[ 1790.832069]  __x64_sys_write+0x73/0xb0
[ 1790.835948]  do_syscall_64+0x103/0x610
[ 1790.839843]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1790.845029] RIP: 0033:0x457f29
[ 1790.848206] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1790.867104] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1790.874902] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1790.882156] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
08:40:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0)
write(r2, &(0x7f00000000c0)="f490d0c4ac084942b41ba3a220dd98e393ca62118ce76bf96b9d96a6d6eb2879ef9c4aedafca4d28c132bf998b18bc0ccf2633e2fd46993c8b0b55a34ee6a6567c759ee49695095951ffa82f65a145788e1391129cee25d07ed95f9de632ebfb74cf36f95db469a35bf648841c4a9eb90b7544b78c856cd99f310ee0703710a4d806fdeccd03f70e994e278d323bb447ecf2d3c8995652890850fc3efd2b6ac4d679cef233567adcfec1851f3fb7b63d01a562ab7ad288bb5b8a6265e2eb4dee1aa3c09521978bf1cb4202b422c18434360424b42fc97e0cc0f562ca602c", 0xde)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:38 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1108}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1790.889409] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1790.897799] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1790.905061] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
08:40:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x7}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1790.971403] binder: undelivered TRANSACTION_ERROR: 29201
[ 1791.046753] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1791.074141] binder_alloc_new_buf_locked: 2 callbacks suppressed
[ 1791.074156] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:38 executing program 5 (fault-call:5 fault-nth:1):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:38 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x10800, 0x180)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000180)=0x4)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1791.104958] binder: 12848:12849 ioctl c018620b 0 returned -14
[ 1791.182876] binder_transaction: 4 callbacks suppressed
[ 1791.182892] binder: 12844:12847 transaction failed 29201/-28, size 0-8 line 3147
[ 1791.197742] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1791.210406] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1791.225156] binder: 12848:12849 transaction failed 29201/-28, size 24-8 line 3147
[ 1791.272598] FAULT_INJECTION: forcing a failure.
[ 1791.272598] name failslab, interval 1, probability 0, space 0, times 0
08:40:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x440200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="bc125c240810ab6c3357c64c0a796db070ec368c2eb9"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1791.398133] CPU: 0 PID: 12868 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1791.405121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1791.414491] Call Trace:
[ 1791.417173]  dump_stack+0x172/0x1f0
[ 1791.420807]  should_fail.cold+0xa/0x15
[ 1791.424691]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1791.429809]  ? ___might_sleep+0x163/0x280
[ 1791.433997]  __should_failslab+0x121/0x190
[ 1791.438262]  should_failslab+0x9/0x14
[ 1791.442081]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1791.451401]  snd_pcm_oss_change_params_locked+0x1df/0x3750
[ 1791.457061]  ? __mutex_lock+0x3cd/0x1310
[ 1791.461125]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1791.465707]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1791.471266]  ? calibrate_delay.cold+0x453/0x4a7
[ 1791.475945]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1791.481835]  ? mutex_trylock+0x1e0/0x1e0
[ 1791.485893]  ? retint_kernel+0x2d/0x2d
[ 1791.489783]  ? trace_hardirqs_on_caller+0x6a/0x220
[ 1791.494741]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1791.499513]  ? retint_kernel+0x2d/0x2d
[ 1791.503435]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1791.508621]  snd_pcm_oss_write+0x42b/0x8f0
[ 1791.508650]  __vfs_write+0x116/0x8e0
[ 1791.508665]  ? __might_sleep+0x95/0x190
[ 1791.508678]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1791.508692]  ? kernel_read+0x120/0x120
[ 1791.508706]  ? __inode_security_revalidate+0xf7/0x150
[ 1791.508725]  ? avc_policy_seqno+0xd/0x70
[ 1791.538542]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1791.543595]  ? selinux_file_permission+0x9b/0x570
[ 1791.548446]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1791.553986]  ? security_file_permission+0x94/0x380
[ 1791.558926]  ? rw_verify_area+0x118/0x360
[ 1791.563112]  vfs_write+0x20c/0x580
[ 1791.566658]  ksys_write+0xea/0x1f0
[ 1791.570199]  ? __ia32_sys_read+0xb0/0xb0
[ 1791.574265]  ? do_syscall_64+0x26/0x610
[ 1791.578789]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1791.584155]  ? do_syscall_64+0x26/0x610
[ 1791.588144]  __x64_sys_write+0x73/0xb0
[ 1791.592035]  do_syscall_64+0x103/0x610
[ 1791.595936]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1791.601137] RIP: 0033:0x457f29
[ 1791.604331] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1791.623229] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1791.630947] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1791.638214] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
08:40:38 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0xa}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:38 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x7}, 0x2)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1791.645483] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1791.652754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1791.660027] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1791.740234] binder: 12970:13046 ioctl c018620b 0 returned -14
[ 1791.822680] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1791.870402] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:39 executing program 5 (fault-call:5 fault-nth:2):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

[ 1791.949194] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1791.958158] binder: 12970:13126 transaction failed 29201/-28, size 24-8 line 3147
[ 1791.966685] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1791.976942] binder: 13053:13148 transaction failed 29201/-28, size 0-8 line 3147
[ 1791.989877] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1791.998733] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1792.006484] net_ratelimit: 24 callbacks suppressed
[ 1792.006491] protocol 88fb is buggy, dev hsr_slave_0
[ 1792.007633] protocol 88fb is buggy, dev hsr_slave_0
[ 1792.012504] protocol 88fb is buggy, dev hsr_slave_1
[ 1792.017535] protocol 88fb is buggy, dev hsr_slave_1
[ 1792.032635] protocol 88fb is buggy, dev hsr_slave_0
[ 1792.037740] protocol 88fb is buggy, dev hsr_slave_1
[ 1792.042861] protocol 88fb is buggy, dev hsr_slave_0
08:40:39 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r1=>0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x5, 0x6, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000080), 0x7)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r3 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r3, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1792.048011] protocol 88fb is buggy, dev hsr_slave_1
[ 1792.050801] FAULT_INJECTION: forcing a failure.
[ 1792.050801] name failslab, interval 1, probability 0, space 0, times 0
[ 1792.064137] binder: 13053:13167 transaction failed 29201/-28, size 0-8 line 3147
[ 1792.074144] CPU: 1 PID: 13207 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1792.081101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1792.090458] Call Trace:
[ 1792.093061]  dump_stack+0x172/0x1f0
08:40:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x0, 0x595, 0x7, 0x5}, 0x14)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1792.096712]  should_fail.cold+0xa/0x15
[ 1792.100621]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1792.105741]  ? ___might_sleep+0x163/0x280
[ 1792.109914]  __should_failslab+0x121/0x190
[ 1792.114178]  should_failslab+0x9/0x14
[ 1792.118130]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1792.122824]  snd_pcm_oss_change_params_locked+0x217/0x3750
[ 1792.128467]  ? __mutex_lock+0x3cd/0x1310
[ 1792.132539]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1792.138325]  ? mutex_trylock+0x1e0/0x1e0
[ 1792.142388]  ? get_pid_task+0xc9/0x190
[ 1792.146294]  ? __lock_acquire+0x548/0x3fb0
[ 1792.150518]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1792.155200]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.160725]  ? debug_smp_processor_id+0x3c/0x280
[ 1792.165485]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1792.170685]  snd_pcm_oss_write+0x42b/0x8f0
[ 1792.174919]  __vfs_write+0x116/0x8e0
[ 1792.178617]  ? __might_sleep+0x95/0x190
[ 1792.182593]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1792.187510]  ? kernel_read+0x120/0x120
[ 1792.191386]  ? __inode_security_revalidate+0xf7/0x150
[ 1792.196566]  ? avc_policy_seqno+0xd/0x70
[ 1792.200610]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1792.205622]  ? selinux_file_permission+0x9b/0x570
[ 1792.210459]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1792.215983]  ? security_file_permission+0x94/0x380
[ 1792.220914]  ? rw_verify_area+0x118/0x360
[ 1792.225066]  vfs_write+0x20c/0x580
[ 1792.228594]  ksys_write+0xea/0x1f0
[ 1792.232127]  ? __ia32_sys_read+0xb0/0xb0
[ 1792.236173]  ? do_syscall_64+0x26/0x610
[ 1792.240139]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1792.245502]  ? do_syscall_64+0x26/0x610
[ 1792.249462]  __x64_sys_write+0x73/0xb0
[ 1792.253353]  do_syscall_64+0x103/0x610
[ 1792.257245]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1792.262431] RIP: 0033:0x457f29
[ 1792.265618] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1792.284535] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1792.292240] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1792.299581] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1792.306924] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1792.314178] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1792.321431] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1792.392870] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1792.401134] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1792.410089] protocol 88fb is buggy, dev hsr_slave_0
[ 1792.410155] protocol 88fb is buggy, dev hsr_slave_1
[ 1792.450462] binder: 13277:13279 transaction failed 29201/-28, size 0-8 line 3147
08:40:43 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x20e43d, 0x22183)
r1 = dup3(r0, r0, 0x0)
r2 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0)
write$cgroup_type(r2, &(0x7f00000001c0)='threaded\x00', 0xffffffffffffffd6)
ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000040))

08:40:43 executing program 5 (fault-call:5 fault-nth:3):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000000000000000000000080000000000000042000000000000006f4c499226bded428dec891ddfdfadc4a26b4c22e83a573342b9f63411505fdad93d6cd07a3d2581faaec550cb0a1dd21f0f29f6d046fa81d896f33581feee25423922d925c5fd11cb155922b47c62a38efadcb1daa211422914d8611e24ef92da275c683237894454b1532fa49d91e11b2969cc3f73aa1835f8d23f2daa5a285a4c7adbcee161fba7475e19d14d444d9e1f5013682372f444a4cfa1deb518e0526107a20ea8076bf2aae294460c2be5cb6155890ca69230046b3621fa091319952ebd8dab8fae5015f10fc453b268058d23b15e5acf96e0777127d4d92a11d1bc36ebdd73c2586e8792bf7dabc387d598c7619990b3a9502848a6e42526468633ffed0b137d96ae7c4d41da62ea6af58bd0a1a5c182008b5d86ff1685fac63e9f3c2594cbb7264b02522c081b68ecefce226ff80f", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="07414672e28e069a052ca0f053e6ea07340900000066671ae2c479047a8d6b98243953ce"]], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x6, 0x40000)
r4 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x4, 0x400000)
ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000000240)={0x51ca})
pipe(&(0x7f0000000500)={<r5=>0xffffffffffffffff})
r6 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x800)
r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000380)={0x1, 0x5, [{r3, 0x0, 0xfffffffff0000000, 0xfffff000}, {r4, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0xfffff000, 0x4000}, {r6, 0x0, 0x100001000, 0x1000000008000}, {r7, 0x0, 0x1000000000000, 0x1000000000000}]})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

08:40:43 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x80000000000}, 0xfffffefd)

08:40:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x12}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:43 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000180)=""/210)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

[ 1795.986428] binder_alloc: 32531: binder_alloc_buf size 317827579904 failed, no address space
[ 1796.001132] binder: 13389:13393 ioctl c018620b 0 returned -14
[ 1796.021361] FAULT_INJECTION: forcing a failure.
[ 1796.021361] name failslab, interval 1, probability 0, space 0, times 0
[ 1796.088750] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1796.139520] CPU: 1 PID: 13396 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1796.146507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1796.155868] Call Trace:
[ 1796.158467]  dump_stack+0x172/0x1f0
[ 1796.162106]  should_fail.cold+0xa/0x15
[ 1796.165999]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1796.167325] binder: 13387:13392 transaction failed 29201/-28, size 34359738368-283467841536 line 3147
[ 1796.171120]  ? ___might_sleep+0x163/0x280
[ 1796.171143]  __should_failslab+0x121/0x190
[ 1796.186817] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1796.188879]  should_failslab+0x9/0x14
[ 1796.200361]  __kmalloc+0x2dc/0x740
[ 1796.203913]  ? unwind_get_return_address+0x61/0xa0
[ 1796.208855]  ? __save_stack_trace+0x8a/0xf0
[ 1796.213185]  ? constrain_params_by_rules+0x118/0x1180
[ 1796.218122] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1796.218384]  constrain_params_by_rules+0x118/0x1180
[ 1796.227719] binder_release_work: 6 callbacks suppressed
[ 1796.227727] binder: undelivered TRANSACTION_ERROR: 29201
[ 1796.232257]  ? save_stack+0xa9/0xd0
[ 1796.232274]  ? save_stack+0x45/0xd0
[ 1796.237903] binder: 13389:13393 transaction failed 29201/-28, size 24-8 line 3147
[ 1796.243067]  ? kmem_cache_alloc_trace+0x151/0x760
[ 1796.243083]  ? snd_pcm_oss_change_params_locked+0x217/0x3750
[ 1796.243101]  ? snd_pcm_mmap_status_fault+0x240/0x240
[ 1796.273667]  ? vfs_write+0x20c/0x580
[ 1796.277384]  ? ksys_write+0xea/0x1f0
[ 1796.281096]  ? __x64_sys_write+0x73/0xb0
[ 1796.285158]  ? do_syscall_64+0x103/0x610
[ 1796.289226]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.294599]  ? __lock_acquire+0x548/0x3fb0
[ 1796.298872]  ? process_measurement+0x19a/0x1570
[ 1796.303566]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.309193]  ? debug_smp_processor_id+0x3c/0x280
[ 1796.313965]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1796.319210]  ? snd_interval_refine+0x42a/0x720
[ 1796.323798]  snd_pcm_hw_refine+0xbf9/0xf20
[ 1796.328064]  ? constrain_params_by_rules+0x1180/0x1180
[ 1796.333361]  ? snd_pcm_oss_change_params_locked+0x217/0x3750
[ 1796.339160]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1796.344183]  ? memset+0x32/0x40
[ 1796.347464]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.353002]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 1796.357770]  snd_pcm_oss_change_params_locked+0x6c2/0x3750
[ 1796.363405]  ? __mutex_lock+0x3cd/0x1310
[ 1796.367510]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1796.373310]  ? mutex_trylock+0x1e0/0x1e0
[ 1796.377376]  ? get_pid_task+0xc9/0x190
[ 1796.381271]  ? __lock_acquire+0x548/0x3fb0
[ 1796.385529]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1796.390197]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.395735]  ? debug_smp_processor_id+0x3c/0x280
[ 1796.400499]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1796.405701]  snd_pcm_oss_write+0x42b/0x8f0
[ 1796.409950]  __vfs_write+0x116/0x8e0
[ 1796.413676]  ? __might_sleep+0x95/0x190
[ 1796.417655]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1796.422499]  ? kernel_read+0x120/0x120
[ 1796.426392]  ? __inode_security_revalidate+0xf7/0x150
[ 1796.431582]  ? avc_policy_seqno+0xd/0x70
[ 1796.435642]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1796.440658]  ? selinux_file_permission+0x9b/0x570
[ 1796.445514]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.451057]  ? security_file_permission+0x94/0x380
[ 1796.456164]  ? rw_verify_area+0x118/0x360
[ 1796.460315]  vfs_write+0x20c/0x580
[ 1796.463860]  ksys_write+0xea/0x1f0
[ 1796.467403]  ? __ia32_sys_read+0xb0/0xb0
[ 1796.471469]  ? do_syscall_64+0x26/0x610
[ 1796.475468]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.480834]  ? do_syscall_64+0x26/0x610
[ 1796.484819]  __x64_sys_write+0x73/0xb0
[ 1796.488715]  do_syscall_64+0x103/0x610
[ 1796.492615]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.497804] RIP: 0033:0x457f29
[ 1796.500997] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1796.520767] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1796.528492] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
08:40:43 executing program 1:
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000100)=""/142, &(0x7f0000000080)=0x8e)
ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0))
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000280)={0x0, 0x1, @start={0x3f, 0x1}})

08:40:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x94000, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000380)={'filter\x00'}, &(0x7f00000002c0)=0x78)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2f, 'rdma'}, {0x2f, 'pids'}]}, 0xc)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f00000001c0)=[@acquire, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x38, 0x10, &(0x7f0000000140)=[@fda={0x66646185, 0xa, 0x3, 0x22}, @flat={0x776a2a85, 0x10a, r3, 0x2}], &(0x7f0000000180)=[0x38, 0x48]}}], 0xc4, 0x0, &(0x7f0000000480)="c558bf11a67237fa7ac35f7576216f63ee932702f32083f6d347ed20c16c0ebe3c2b44f443da8a7a1f5e0df37316ca5707fd41efac14aabc8060102be57668c832a870ff61d7b12978896697ce74ec4e608097de13d360f89a8f3899f6d900e5ea005796a465013cf049844497a56f539a927e087b5bed2f4283e088e859fa1326690f2fa611ef6c3f9d5639f9c91a8e828f9d2c2556a829287e019210862e144b89f0c4df94a8744d62945eb95b33352840e3d7acd4cf33edcdd47f5efec5762a66f54a"})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000000ec)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="0040000004efff00"]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1796.535770] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1796.543042] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1796.550394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1796.557662] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
08:40:43 executing program 5 (fault-call:5 fault-nth:4):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:43 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x48}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

[ 1796.641155] binder: undelivered TRANSACTION_ERROR: 29201
[ 1796.693855] binder: 13566:13590 got reply transaction with no transaction stack
[ 1796.719627] binder: 13647:13670 ioctl c018620b 0 returned -14
[ 1796.750724] binder: 13566:13590 transaction failed 29201/-71, size 56-16 line 2899
[ 1796.760351] FAULT_INJECTION: forcing a failure.
[ 1796.760351] name failslab, interval 1, probability 0, space 0, times 0
[ 1796.764962] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1796.803579] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1796.809879] CPU: 1 PID: 13702 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1796.819277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1796.828639] Call Trace:
[ 1796.831261]  dump_stack+0x172/0x1f0
[ 1796.834883]  should_fail.cold+0xa/0x15
[ 1796.838772]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1796.843862]  ? ___might_sleep+0x163/0x280
[ 1796.848345]  __should_failslab+0x121/0x190
[ 1796.852567]  should_failslab+0x9/0x14
[ 1796.856351]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1796.861007]  ? memset+0x32/0x40
[ 1796.864272]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.869792]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 1796.874544]  snd_pcm_oss_change_params_locked+0x75c/0x3750
[ 1796.880153]  ? __mutex_lock+0x3cd/0x1310
[ 1796.884202]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1796.889981]  ? mutex_trylock+0x1e0/0x1e0
[ 1796.894033]  ? get_pid_task+0xc9/0x190
[ 1796.897913]  ? __lock_acquire+0x548/0x3fb0
[ 1796.902157]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1796.906807]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.912341]  ? debug_smp_processor_id+0x3c/0x280
[ 1796.917095]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1796.922268]  snd_pcm_oss_write+0x42b/0x8f0
[ 1796.926498]  __vfs_write+0x116/0x8e0
[ 1796.930202]  ? __might_sleep+0x95/0x190
[ 1796.934158]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1796.938998]  ? kernel_read+0x120/0x120
[ 1796.942891]  ? __inode_security_revalidate+0xf7/0x150
[ 1796.948065]  ? avc_policy_seqno+0xd/0x70
[ 1796.952116]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1796.957128]  ? selinux_file_permission+0x9b/0x570
[ 1796.961963]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1796.967503]  ? security_file_permission+0x94/0x380
[ 1796.972429]  ? rw_verify_area+0x118/0x360
[ 1796.976579]  vfs_write+0x20c/0x580
[ 1796.980104]  ksys_write+0xea/0x1f0
[ 1796.983627]  ? __ia32_sys_read+0xb0/0xb0
[ 1796.987706]  ? do_syscall_64+0x26/0x610
[ 1796.991662]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1796.997018]  ? do_syscall_64+0x26/0x610
[ 1797.000983]  __x64_sys_write+0x73/0xb0
[ 1797.004865]  do_syscall_64+0x103/0x610
[ 1797.008737]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1797.013907] RIP: 0033:0x457f29
[ 1797.017083] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1797.036062] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1797.043749] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1797.051000] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1797.058249] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1797.065517] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1797.072873] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1797.082849] binder: 13647:13719 transaction failed 29201/-28, size 24-8 line 3147
[ 1797.082956] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1797.100670] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:44 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x4c}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:44 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f0000000040)={0x2, 0x3, 0xfa, 0x80000000, 0x800})
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x300c0, 0x0)
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000240)=""/77)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200000, 0xa)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x9d0000, 0x3, 0x7404, [], &(0x7f0000000180)={0x99096f, 0xb1, [], @value64=0x1}})

[ 1797.125703] binder: 13566:13718 transaction failed 29201/-28, size 0-8 line 3147
[ 1797.135662] binder: undelivered TRANSACTION_ERROR: 29201
[ 1797.144135] binder: 13566:13590 got reply transaction with no transaction stack
[ 1797.175522] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1797.200199] binder: undelivered TRANSACTION_ERROR: 29201
[ 1797.203389] binder: 13566:13590 transaction failed 29201/-71, size 56-16 line 2899
[ 1797.207257] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
08:40:44 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000200))
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48)

[ 1797.227420] binder: 13566:13718 transaction failed 29201/-28, size 0-8 line 3147
[ 1797.228218] binder: 13824:13826 ioctl c018620b 0 returned -14
[ 1797.235533] binder: undelivered TRANSACTION_ERROR: 29201
08:40:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xd1, 0x20000)
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000140)={0x9, &(0x7f0000000040)="e2ccc191419cfa0e1bf6f8f75027dab448325497517792ff582c423623fe6bf9fbeb7c466c5702c62d5e7b59609ecbdbe91b3a2ba25491c30667d52ddb2c93fbd301f01326ba977d8499ba602dc1f601f070ccaa10e8681fcd25d9614310490728df4224c279feff83b600395cea591e032cb1d562e083cc7b5e0f518758b39fee447c44b85f6b218bd028611a99045a16c7b6efb618f4775df0e61de7726ea2c43e6484950ec03d8532ef4b4a096494bb763bc284875359c10debbd1235498b546f0e8921abd4ca23e19c76b0484951b556254812f651df34ebc6d846a3e2fd63dec85adace9011ad985026d5"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1797.357286] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1797.463169] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1797.535438] binder: 13824:13830 transaction failed 29201/-28, size 24-8 line 3147
08:40:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1797.771871] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1797.800871] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1797.829442] binder: 14034:14035 transaction failed 29201/-28, size 0-8 line 3147
[ 1797.881840] binder: undelivered TRANSACTION_ERROR: 29201
[ 1798.039269] binder: undelivered TRANSACTION_ERROR: 29201
[ 1798.566438] net_ratelimit: 26 callbacks suppressed
[ 1798.566444] protocol 88fb is buggy, dev hsr_slave_0
[ 1798.576537] protocol 88fb is buggy, dev hsr_slave_1
[ 1798.656468] protocol 88fb is buggy, dev hsr_slave_0
[ 1798.661534] protocol 88fb is buggy, dev hsr_slave_1
[ 1798.666713] protocol 88fb is buggy, dev hsr_slave_0
[ 1798.671753] protocol 88fb is buggy, dev hsr_slave_1
[ 1798.676919] protocol 88fb is buggy, dev hsr_slave_0
[ 1798.681954] protocol 88fb is buggy, dev hsr_slave_1
[ 1798.687084] protocol 88fb is buggy, dev hsr_slave_0
[ 1798.692110] protocol 88fb is buggy, dev hsr_slave_1
08:40:48 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x4000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:48 executing program 5 (fault-call:5 fault-nth:5):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:48 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x4000000000000}, 0xfffffefd)

08:40:48 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x60}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:48 executing program 0:
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x288080, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x20000, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x200000, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x88200, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x202000, 0x0)
write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2d00000004100000000000000000000006000000f8fffffffe0700000000000005000000000000000000000000ef412d0a90a179b939c272132006e29d7ba9a73ffb9aaa39a3169b167503344983a76588cde2fb095158c54088a95fc08a049891752cc0d27b01579641eb567d2805850d7295c41593331935fece7b826a67deb84b6c821a2d0a"], 0x2d)
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)

08:40:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="439319211e071d76f35ffe079ad161d58b96fc4fdad6a1be70d1ddd6f55ed0e8ffce4a60a4e7fb31a068a8bb91eeeb4ee437981770bdba169dbbe96f59ba83b1665f66e72bbdb4dcde8e01894f04db752663a66996f4f18a584b96779f72ee8b835af54d8d845d0e04dbbabe8ed7dacb07c18d77705f0dbde3f43c54950e816d0c97", 0x82, 0xfffffffffffffffb)
keyctl$invalidate(0x15, r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000000000000000000000000000000000000000000000080000000000000000000000008000000000000000000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1801.252386] binder: 14040:14045 ioctl c018620b 0 returned -14
[ 1801.273755] FAULT_INJECTION: forcing a failure.
[ 1801.273755] name failslab, interval 1, probability 0, space 0, times 0
[ 1801.287294] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1801.356269] CPU: 0 PID: 14046 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1801.363234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1801.372675] Call Trace:
[ 1801.375267]  dump_stack+0x172/0x1f0
[ 1801.378899]  should_fail.cold+0xa/0x15
[ 1801.382788]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1801.387897]  ? ___might_sleep+0x163/0x280
[ 1801.392064]  __should_failslab+0x121/0x190
[ 1801.396329]  should_failslab+0x9/0x14
[ 1801.400125]  __kmalloc+0x2dc/0x740
[ 1801.403665]  ? unwind_get_return_address+0x61/0xa0
[ 1801.408618]  ? __save_stack_trace+0x8a/0xf0
[ 1801.412938]  ? constrain_params_by_rules+0x118/0x1180
[ 1801.418151]  constrain_params_by_rules+0x118/0x1180
[ 1801.423166]  ? save_stack+0xa9/0xd0
[ 1801.426787]  ? save_stack+0x45/0xd0
[ 1801.430413]  ? kmem_cache_alloc_trace+0x151/0x760
[ 1801.435266]  ? snd_pcm_oss_change_params_locked+0x75c/0x3750
[ 1801.441057]  ? snd_pcm_mmap_status_fault+0x240/0x240
[ 1801.446159]  ? vfs_write+0x20c/0x580
[ 1801.449881]  ? ksys_write+0xea/0x1f0
[ 1801.453586]  ? __x64_sys_write+0x73/0xb0
[ 1801.457640]  ? do_syscall_64+0x103/0x610
[ 1801.461697]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1801.467060]  ? __lock_acquire+0x548/0x3fb0
[ 1801.471302]  ? process_measurement+0x19a/0x1570
[ 1801.475979]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1801.481532]  ? debug_smp_processor_id+0x3c/0x280
[ 1801.486294]  ? fs_reclaim_acquire.part.0+0x30/0x30
[ 1801.491216]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1801.496749]  ? snd_interval_refine+0x42a/0x720
[ 1801.501330]  snd_pcm_hw_refine+0xbf9/0xf20
[ 1801.511392]  ? constrain_params_by_rules+0x1180/0x1180
[ 1801.516665]  ? snd_interval_refine+0x42a/0x720
[ 1801.521250]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1801.526785]  ? _snd_pcm_hw_param_set.constprop.0+0x282/0x590
[ 1801.532601]  ? snd_pcm_oss_change_params_locked+0x75c/0x3750
[ 1801.538510]  ? rcu_read_lock_sched_held+0x110/0x130
[ 1801.543523]  ? snd_pcm_oss_open+0x60/0x60
[ 1801.547669]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1801.553219]  ? _snd_pcm_hw_param_min+0x29d/0x560
[ 1801.557979]  snd_pcm_oss_change_params_locked+0xc99/0x3750
[ 1801.563630]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1801.569424]  ? mutex_trylock+0x1e0/0x1e0
[ 1801.573484]  ? get_pid_task+0xc9/0x190
[ 1801.577921]  ? __lock_acquire+0x548/0x3fb0
[ 1801.582157]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1801.586826]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1801.592364]  ? debug_smp_processor_id+0x3c/0x280
[ 1801.597124]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1801.602316]  snd_pcm_oss_write+0x42b/0x8f0
[ 1801.606680]  __vfs_write+0x116/0x8e0
[ 1801.610395]  ? __might_sleep+0x95/0x190
[ 1801.614395]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1801.619236]  ? kernel_read+0x120/0x120
[ 1801.623122]  ? __inode_security_revalidate+0xf7/0x150
[ 1801.628320]  ? avc_policy_seqno+0xd/0x70
[ 1801.632396]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1801.637411]  ? selinux_file_permission+0x9b/0x570
[ 1801.642262]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1801.648324]  ? security_file_permission+0x94/0x380
[ 1801.653260]  ? rw_verify_area+0x118/0x360
[ 1801.657413]  vfs_write+0x20c/0x580
[ 1801.660959]  ksys_write+0xea/0x1f0
[ 1801.664499]  ? __ia32_sys_read+0xb0/0xb0
[ 1801.668560]  ? do_syscall_64+0x26/0x610
[ 1801.672532]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1801.677891]  ? do_syscall_64+0x26/0x610
[ 1801.681971]  __x64_sys_write+0x73/0xb0
[ 1801.685863]  do_syscall_64+0x103/0x610
[ 1801.689768]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1801.694971] RIP: 0033:0x457f29
[ 1801.698161] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1801.717063] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1801.724771] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1801.732035] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1801.739310] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1801.746974] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1801.754240] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1801.766900] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1801.824705] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1801.833001] binder: 14041:14050 transaction failed 29201/-28, size 0-8 line 3147
[ 1801.846711] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1801.858374] binder: 14040:14053 transaction failed 29201/-28, size 24-8 line 3147
08:40:49 executing program 3:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8010014}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xad95}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x444}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2e0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000000}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1801.889125] binder: undelivered TRANSACTION_ERROR: 29201
08:40:49 executing program 1:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)
statfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/201)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0xffffffffffffff5a)

[ 1802.017813] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1802.026960] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1802.038061] binder: 14257:14258 transaction failed 29201/-28, size 0-8 line 3147
08:40:49 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)='+'})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85, 0x0, 0x0, 0x68}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})

08:40:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000700000000a585547200000000000000000000000000000000000000000000000000000008000000000000000010000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x100, 0x0)
getresuid(&(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000480)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8)
write$P9_RSTATu(r1, &(0x7f0000000580)={0x96, 0x7d, 0x1, {{0x0, 0x74, 0x2, 0x9, {0x80, 0x0, 0x7}, 0x40010000, 0x2, 0x88, 0x18ec0000000000, 0xd, '/dev/binder#\x00', 0xd, '/dev/binder#\x00', 0x13, 'bdevsystemmime_type', 0x14, 'bdev-mime_type.nodev'}, 0xd, '/dev/binder#\x00', r2, r3, r4}}, 0x96)

[ 1802.081593] binder: undelivered TRANSACTION_ERROR: 29201
[ 1802.120274] binder: undelivered TRANSACTION_ERROR: 29201
[ 1802.179998] binder: 14296:14371 ioctl c018620b 0 returned -14
[ 1802.243398] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1802.253396] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1802.268236] binder_alloc: 32531: binder_alloc_buf size 32 failed, no address space
[ 1802.275985] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1802.276709] binder: 14420:14467 transaction failed 29201/-28, size 0-8 line 3147
08:40:49 executing program 0:
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@dev}, 0x0, @in=@dev}}, 0xe8)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000)
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x766, 0x20001)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8280002}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x20, 0x9, @udp='udp:syz2\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xe440, 0x1)

[ 1802.288601] binder: 14296:14468 transaction failed 29201/-28, size 24-8 line 3147
[ 1802.308965] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1802.321658] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1802.331688] binder: 14420:14469 transaction failed 29201/-28, size 0-8 line 3147
08:40:49 executing program 5 (fault-call:5 fault-nth:6):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a0800023c390d3188b070")
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x80000002)
write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0xffffffffffffffd3, 0x34, 0x100000000000000}, 0xfffffefd)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

08:40:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl(r1, 0x7, &(0x7f0000000040)="d70aff1ebe21c3240ca7ac37ba47f5dd1b4621a21342aca2310d606c9d54b8d5812c7dbbb96e9258958aa3")
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x288, 0xc8, 0x9})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1802.344620] binder: undelivered TRANSACTION_ERROR: 29201
[ 1802.351343] binder: undelivered TRANSACTION_ERROR: 29201
08:40:49 executing program 1:
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x400000000000e440, 0x1)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$KVM_ASSIGN_DEV_IRQ(r2, 0x4040ae70, &(0x7f00000001c0)={0x9, 0x1ff, 0x5b, 0x400})
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000040)={0x1, 0x2, [@local, @random="b8c8a752258f"]})
write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c)
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080))

[ 1802.429185] binder: 14474:14476 ioctl 660c 0 returned -22
[ 1802.451809] binder_alloc: 32531: binder_alloc_buf size 8 failed, no address space
[ 1802.460167] binder_alloc: allocated: 12288 (num: 405 largest: 32), free: 0 (num: 0 largest: 0)
[ 1802.469706] binder: 14474:14476 transaction failed 29201/-28, size 0-8 line 3147
[ 1802.478667] binder: 14474:14476 ioctl c0306201 0 returned -14
[ 1802.495801] FAULT_INJECTION: forcing a failure.
[ 1802.495801] name failslab, interval 1, probability 0, space 0, times 0
[ 1802.517770] binder: undelivered TRANSACTION_ERROR: 29201
[ 1802.523789] CPU: 1 PID: 14564 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1802.530731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1802.540093] Call Trace:
[ 1802.542710]  dump_stack+0x172/0x1f0
[ 1802.546347]  should_fail.cold+0xa/0x15
[ 1802.550233]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1802.555328]  ? ___might_sleep+0x163/0x280
[ 1802.559471]  __should_failslab+0x121/0x190
[ 1802.563697]  should_failslab+0x9/0x14
[ 1802.567503]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1802.572169]  snd_pcm_hw_param_near.constprop.0+0xec/0x890
[ 1802.577692]  ? mark_held_locks+0xa4/0xf0
[ 1802.581740]  ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750
[ 1802.587615]  ? snd_pcm_oss_release_file.part.0+0xa0/0xa0
[ 1802.593055]  ? snd_pcm_oss_change_params_locked+0x2b1c/0x3750
[ 1802.598928]  snd_pcm_oss_change_params_locked+0xa0a/0x3750
[ 1802.604561]  ? _snd_pcm_hw_param_set.constprop.0+0x590/0x590
[ 1802.610360]  ? mutex_trylock+0x1e0/0x1e0
[ 1802.614412]  ? get_pid_task+0xc9/0x190
[ 1802.618296]  ? __lock_acquire+0x548/0x3fb0
[ 1802.622538]  ? refcount_dec_not_one+0x1f0/0x1f0
[ 1802.627199]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1802.632748]  ? debug_smp_processor_id+0x3c/0x280
[ 1802.637514]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1802.642695]  snd_pcm_oss_write+0x42b/0x8f0
[ 1802.646929]  __vfs_write+0x116/0x8e0
[ 1802.650627]  ? __might_sleep+0x95/0x190
[ 1802.654582]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1802.659408]  ? kernel_read+0x120/0x120
[ 1802.663283]  ? __inode_security_revalidate+0xf7/0x150
[ 1802.668463]  ? avc_policy_seqno+0xd/0x70
[ 1802.672512]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1802.677529]  ? selinux_file_permission+0x9b/0x570
[ 1802.682384]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1802.687918]  ? security_file_permission+0x94/0x380
[ 1802.692839]  ? rw_verify_area+0x118/0x360
[ 1802.696974]  vfs_write+0x20c/0x580
[ 1802.700502]  ksys_write+0xea/0x1f0
[ 1802.704028]  ? __ia32_sys_read+0xb0/0xb0
[ 1802.708071]  ? do_syscall_64+0x26/0x610
[ 1802.712124]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1802.717477]  ? do_syscall_64+0x26/0x610
[ 1802.721438]  __x64_sys_write+0x73/0xb0
[ 1802.725305]  do_syscall_64+0x103/0x610
[ 1802.729179]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1802.734350] RIP: 0033:0x457f29
[ 1802.737559] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1802.756892] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1802.764582] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1802.771922] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1802.779190] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1802.786442] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1802.793712] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1802.806113] ==================================================================
[ 1802.813952] BUG: KASAN: slab-out-of-bounds in default_write_copy_kernel+0xdc/0x130
[ 1802.821670] Read of size 64 at addr ffff8880961734c0 by task syz-executor.5/14564
[ 1802.829388] 
[ 1802.831035] CPU: 1 PID: 14564 Comm: syz-executor.5 Not tainted 5.0.0+ #13
[ 1802.838059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1802.847405] Call Trace:
[ 1802.849999]  dump_stack+0x172/0x1f0
[ 1802.853714]  ? default_write_copy_kernel+0xdc/0x130
[ 1802.858771]  print_address_description.cold+0x7c/0x20d
[ 1802.864080]  ? default_write_copy_kernel+0xdc/0x130
[ 1802.869233]  ? default_write_copy_kernel+0xdc/0x130
[ 1802.874235]  kasan_report.cold+0x1b/0x40
[ 1802.878289]  ? snd_pcm_stream_unlock+0xc0/0xc0
[ 1802.882871]  ? default_write_copy_kernel+0xdc/0x130
[ 1802.887868]  check_memory_region+0x123/0x190
[ 1802.892263]  memcpy+0x24/0x50
[ 1802.895368]  default_write_copy_kernel+0xdc/0x130
[ 1802.900193]  ? __bpf_trace_applptr+0x40/0x40
[ 1802.904580]  interleaved_copy+0xd0/0x100
[ 1802.908642]  __snd_pcm_lib_xfer+0xea3/0x1cfa
[ 1802.913048]  ? snd_pcm_hw_rule_step+0x440/0x440
[ 1802.917731]  ? __bpf_trace_applptr+0x40/0x40
[ 1802.922217]  ? pcm_lib_apply_appl_ptr+0x440/0x440
[ 1802.927039]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1802.932561]  ? debug_smp_processor_id+0x3c/0x280
[ 1802.937323]  ? memcpy+0x46/0x50
[ 1802.940584]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1802.945608]  ? linear_transfer+0x74f/0x970
[ 1802.949838]  snd_pcm_oss_write3+0xee/0x230
[ 1802.954528]  io_playback_transfer+0x280/0x330
[ 1802.959020]  snd_pcm_plug_write_transfer+0x30c/0x400
[ 1802.964108]  ? snd_pcm_plug_client_channels_buf+0x450/0x450
[ 1802.969809]  ? snd_pcm_format_physical_width+0x75/0x90
[ 1802.975094]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1802.980107]  ? snd_pcm_plug_client_channels_buf+0x212/0x450
[ 1802.985803]  snd_pcm_oss_write2+0x250/0x410
[ 1802.990114]  ? snd_pcm_oss_write3+0x230/0x230
[ 1802.994589]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1803.000114]  ? snd_pcm_oss_prepare+0x118/0x150
[ 1803.004692]  snd_pcm_oss_write+0x6c2/0x8f0
[ 1803.008918]  __vfs_write+0x116/0x8e0
[ 1803.012621]  ? __might_sleep+0x95/0x190
[ 1803.016580]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1803.021404]  ? kernel_read+0x120/0x120
[ 1803.025288]  ? __inode_security_revalidate+0xf7/0x150
[ 1803.030495]  ? avc_policy_seqno+0xd/0x70
[ 1803.034535]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1803.039551]  ? selinux_file_permission+0x9b/0x570
[ 1803.044379]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1803.050334]  ? security_file_permission+0x94/0x380
[ 1803.055249]  ? rw_verify_area+0x118/0x360
[ 1803.059468]  vfs_write+0x20c/0x580
[ 1803.062990]  ksys_write+0xea/0x1f0
[ 1803.066510]  ? __ia32_sys_read+0xb0/0xb0
[ 1803.070569]  ? do_syscall_64+0x26/0x610
[ 1803.074528]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.079872]  ? do_syscall_64+0x26/0x610
[ 1803.083860]  __x64_sys_write+0x73/0xb0
[ 1803.087730]  do_syscall_64+0x103/0x610
[ 1803.091627]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.096812] RIP: 0033:0x457f29
[ 1803.099994] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1803.118874] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1803.126569] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1803.133823] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1803.141081] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1803.148337] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1803.155595] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1803.162873] 
[ 1803.164492] Allocated by task 14564:
[ 1803.168191]  save_stack+0x45/0xd0
[ 1803.171625]  __kasan_kmalloc.constprop.0+0xcf/0xe0
[ 1803.176534]  kasan_kmalloc+0x9/0x10
[ 1803.180142]  __kmalloc_node+0x4e/0x70
[ 1803.183949]  kvmalloc_node+0x68/0x100
[ 1803.187731]  snd_pcm_plugin_alloc+0x585/0x770
[ 1803.192214]  snd_pcm_plug_alloc+0x212/0x330
[ 1803.196516]  snd_pcm_oss_change_params_locked+0x2118/0x3750
[ 1803.202216]  snd_pcm_oss_make_ready_locked+0xbc/0x130
[ 1803.207386]  snd_pcm_oss_write+0x42b/0x8f0
[ 1803.211600]  __vfs_write+0x116/0x8e0
[ 1803.215314]  vfs_write+0x20c/0x580
[ 1803.218842]  ksys_write+0xea/0x1f0
[ 1803.222362]  __x64_sys_write+0x73/0xb0
[ 1803.226232]  do_syscall_64+0x103/0x610
[ 1803.230106]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.235271] 
[ 1803.236896] Freed by task 5334:
[ 1803.240195]  save_stack+0x45/0xd0
[ 1803.243631]  __kasan_slab_free+0x102/0x150
[ 1803.247848]  kasan_slab_free+0xe/0x10
[ 1803.251630]  kfree+0xcf/0x230
[ 1803.254732]  security_task_free+0x9a/0xf0
[ 1803.258865]  copy_process.part.0+0x35c8/0x7980
[ 1803.263454]  _do_fork+0x257/0xfd0
[ 1803.266899]  __x64_sys_clone+0xbf/0x150
[ 1803.270859]  do_syscall_64+0x103/0x610
[ 1803.274740]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.279905] 
[ 1803.281530] The buggy address belongs to the object at ffff8880961734c0
[ 1803.281530]  which belongs to the cache kmalloc-32 of size 32
[ 1803.294027] The buggy address is located 0 bytes inside of
[ 1803.294027]  32-byte region [ffff8880961734c0, ffff8880961734e0)
[ 1803.305707] The buggy address belongs to the page:
[ 1803.310635] page:ffffea0002585cc0 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff888096173fc1
[ 1803.320074] flags: 0x1fffc0000000200(slab)
[ 1803.324339] raw: 01fffc0000000200 ffffea000299ac48 ffffea0002078b88 ffff88812c3f01c0
[ 1803.332247] raw: ffff888096173fc1 ffff888096173000 000000010000003f 0000000000000000
[ 1803.340105] page dumped because: kasan: bad access detected
[ 1803.345802] 
[ 1803.347406] Memory state around the buggy address:
[ 1803.352314]  ffff888096173380: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 1803.359757]  ffff888096173400: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc
[ 1803.367095] >ffff888096173480: 00 00 01 fc fc fc fc fc 00 00 00 00 fc fc fc fc
[ 1803.374515]                                                        ^
[ 1803.381018]  ffff888096173500: fb fb fb fb fc fc fc fc 00 fc fc fc fc fc fc fc
[ 1803.388362]  ffff888096173580: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[ 1803.395697] ==================================================================
[ 1803.403051] Disabling lock debugging due to kernel taint
[ 1803.409939] Kernel panic - not syncing: panic_on_warn set ...
[ 1803.415843] CPU: 0 PID: 14564 Comm: syz-executor.5 Tainted: G    B             5.0.0+ #13
[ 1803.420014] kobject: 'loop3' (00000000ccc9deaa): kobject_uevent_env
[ 1803.424164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1803.424169] Call Trace:
[ 1803.424187]  dump_stack+0x172/0x1f0
[ 1803.424206]  panic+0x2cb/0x65c
[ 1803.424220]  ? __warn_printk+0xf3/0xf3
[ 1803.431972] binder: undelivered TRANSACTION_ERROR: 29201
[ 1803.440071]  ? default_write_copy_kernel+0xdc/0x130
[ 1803.440086]  ? preempt_schedule+0x4b/0x60
[ 1803.440100]  ? ___preempt_schedule+0x16/0x18
[ 1803.440114]  ? trace_hardirqs_on+0x5e/0x230
[ 1803.445467] kobject: 'loop3' (00000000ccc9deaa): fill_kobj_path: path = '/devices/virtual/block/loop3'
[ 1803.446324]  ? default_write_copy_kernel+0xdc/0x130
[ 1803.446340]  end_report+0x47/0x4f
[ 1803.446352]  ? default_write_copy_kernel+0xdc/0x130
[ 1803.446365]  kasan_report.cold+0xe/0x40
[ 1803.446377]  ? snd_pcm_stream_unlock+0xc0/0xc0
[ 1803.446390]  ? default_write_copy_kernel+0xdc/0x130
[ 1803.446404]  check_memory_region+0x123/0x190
[ 1803.446416]  memcpy+0x24/0x50
[ 1803.446434]  default_write_copy_kernel+0xdc/0x130
[ 1803.525421]  ? __bpf_trace_applptr+0x40/0x40
[ 1803.529840]  interleaved_copy+0xd0/0x100
[ 1803.533917]  __snd_pcm_lib_xfer+0xea3/0x1cfa
[ 1803.538319]  ? snd_pcm_hw_rule_step+0x440/0x440
[ 1803.542980]  ? __bpf_trace_applptr+0x40/0x40
[ 1803.547376]  ? pcm_lib_apply_appl_ptr+0x440/0x440
[ 1803.552227]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1803.557753]  ? debug_smp_processor_id+0x3c/0x280
[ 1803.562501]  ? memcpy+0x46/0x50
[ 1803.565780]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1803.570797]  ? linear_transfer+0x74f/0x970
[ 1803.575031]  snd_pcm_oss_write3+0xee/0x230
[ 1803.579266]  io_playback_transfer+0x280/0x330
[ 1803.583753]  snd_pcm_plug_write_transfer+0x30c/0x400
[ 1803.588859]  ? snd_pcm_plug_client_channels_buf+0x450/0x450
[ 1803.594556]  ? snd_pcm_format_physical_width+0x75/0x90
[ 1803.600199]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1803.605207]  ? snd_pcm_plug_client_channels_buf+0x212/0x450
[ 1803.610928]  snd_pcm_oss_write2+0x250/0x410
[ 1803.615241]  ? snd_pcm_oss_write3+0x230/0x230
[ 1803.619726]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1803.625250]  ? snd_pcm_oss_prepare+0x118/0x150
[ 1803.629824]  snd_pcm_oss_write+0x6c2/0x8f0
[ 1803.634055]  __vfs_write+0x116/0x8e0
[ 1803.637763]  ? __might_sleep+0x95/0x190
[ 1803.641749]  ? snd_pcm_oss_ioctl_compat+0x30/0x30
[ 1803.646591]  ? kernel_read+0x120/0x120
[ 1803.650475]  ? __inode_security_revalidate+0xf7/0x150
[ 1803.655659]  ? avc_policy_seqno+0xd/0x70
[ 1803.659703]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1803.664700]  ? selinux_file_permission+0x9b/0x570
[ 1803.669526]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1803.675064]  ? security_file_permission+0x94/0x380
[ 1803.679985]  ? rw_verify_area+0x118/0x360
[ 1803.684136]  vfs_write+0x20c/0x580
[ 1803.687668]  ksys_write+0xea/0x1f0
[ 1803.691212]  ? __ia32_sys_read+0xb0/0xb0
[ 1803.695258]  ? do_syscall_64+0x26/0x610
[ 1803.699219]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.704564]  ? do_syscall_64+0x26/0x610
[ 1803.708523]  __x64_sys_write+0x73/0xb0
[ 1803.712392]  do_syscall_64+0x103/0x610
[ 1803.716265]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1803.721438] RIP: 0033:0x457f29
[ 1803.724613] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1803.744091] RSP: 002b:00007f5aa465dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1803.751799] RAX: ffffffffffffffda RBX: 00007f5aa465dc90 RCX: 0000000000457f29
[ 1803.759057] RDX: 00000000fffffefd RSI: 00000000200000c0 RDI: 0000000000000005
[ 1803.766310] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1803.773564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5aa465e6d4
[ 1803.780817] R13: 00000000004c6ed7 R14: 00000000004dc798 R15: 0000000000000006
[ 1803.789094] Kernel Offset: disabled
[ 1803.792738] Rebooting in 86400 seconds..