031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  426.733123][T23127] binder: BINDER_SET_CONTEXT_MGR already set
[  426.739279][T23127] binder: 23126:23127 ioctl 4018620d 200000c0 returned -16
[  426.781682][T23127] binder_alloc: 20354: binder_alloc_buf, no vma
18:16:58 executing program 1:

18:16:58 executing program 4:

18:16:58 executing program 3:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

18:16:58 executing program 2:

18:16:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:16:58 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:16:58 executing program 1:

18:16:58 executing program 2:

18:16:58 executing program 4:

[  427.376333][T23143] binder: BINDER_SET_CONTEXT_MGR already set
[  427.382573][T23143] binder: 23138:23143 ioctl 4018620d 200000c0 returned -16
[  427.398349][T23143] binder_alloc: 20354: binder_alloc_buf, no vma
18:16:58 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:16:58 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:16:58 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x4, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x800e00546)

[  427.550738][T23154] binder: BINDER_SET_CONTEXT_MGR already set
[  427.557120][T23154] binder: 23153:23154 ioctl 4018620d 200000c0 returned -16
18:16:58 executing program 2:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x4, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000000), 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x81, &(0x7f0000000080)={0x1c, 0xffffffffffffffff, 0x0, @rand_addr="a5412b44cd650e27c1b76b71f79ee621"}, 0x1c)

18:16:58 executing program 4:
r0 = socket$inet6_tcp(0x1c, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000100)=0x4, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f0000000000), 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f0000000200)='@', 0x1, 0x81, 0x0, 0x0)

18:16:58 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=0x10001, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00961)

18:16:59 executing program 3:
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/169, 0x2aa}], 0x1, 0x0)

18:16:59 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc), 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:16:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:16:59 executing program 2:
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x41, &(0x7f0000000100)=0x5, 0x4)
setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000), 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00b6e)

18:16:59 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x5d, &(0x7f0000000040)="0e097e6c", 0x4)
pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007e6)

18:16:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  428.261557][T23281] binder: BINDER_SET_CONTEXT_MGR already set
[  428.267966][T23281] binder: 23280:23281 ioctl 4018620d 200000c0 returned -16
18:16:59 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:16:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:16:59 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  428.407039][T23295] __nla_parse: 16 callbacks suppressed
[  428.407061][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.423759][T23295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.427513][T23297] binder: BINDER_SET_CONTEXT_MGR already set
[  428.439476][T23297] binder: 23296:23297 ioctl 4018620d 200000c0 returned -16
[  428.537714][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.556338][T23301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.559683][T23303] binder: BINDER_SET_CONTEXT_MGR already set
[  428.572222][T23303] binder: 23302:23303 ioctl 4018620d 200000c0 returned -16
18:16:59 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:16:59 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  428.588786][T23303] binder_alloc_new_buf_locked: 3 callbacks suppressed
[  428.588803][T23303] binder_alloc: 20354: binder_alloc_buf, no vma
[  428.664071][T23308] binder: BINDER_SET_CONTEXT_MGR already set
[  428.670384][T23308] binder: 23307:23308 ioctl 4018620d 200000c0 returned -16
18:16:59 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair(0x17, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xff8c, 0x2, 0x0, 0x800e007e8)
shutdown(r0, 0x0)

[  428.707670][T23308] binder_alloc: 20354: binder_alloc_buf, no vma
[  428.744116][T23311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  428.778284][T23311] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:00 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, 0x0, 0x0, 0x0)

18:17:00 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:00 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x123, 0x2, 0x0, 0xffffffffffffffe2)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0036d)

18:17:00 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvfrom$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x800e00490)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00835)

18:17:00 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_timeval(r0, 0xffff, 0x400001006, &(0x7f0000000080)={0x0, 0x10004}, 0x10)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
setsockopt$sock_timeval(r1, 0xffff, 0x1005, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0xa6f77da8, 0x2, 0x0, 0x800e0062d)
shutdown(r0, 0x0)

[  429.159316][T23499] binder: BINDER_SET_CONTEXT_MGR already set
[  429.165631][T23499] binder: 23496:23499 ioctl 4018620d 200000c0 returned -16
[  429.185035][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  429.199708][T23518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x0, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  429.255291][T23499] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:00 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:00 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreqsrc(r0, 0x0, 0x46, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)

[  429.395781][T23542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  429.404990][T23580] binder: BINDER_SET_CONTEXT_MGR already set
[  429.407714][T23542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  429.411205][T23580] binder: 23575:23580 ioctl 4018620d 200000c0 returned -16
18:17:00 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, 0x0, 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:00 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
clock_gettime(0x100000000000008, &(0x7f00000001c0))
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e002f7)

[  429.498140][T23648] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:00 executing program 1:
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0)

18:17:01 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, 0x0, 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:01 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, 0x0, 0x0, 0x0)

18:17:01 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000180)='s', 0x0}, 0x18)

[  430.035651][T23667] binder: BINDER_SET_CONTEXT_MGR already set
[  430.041869][T23667] binder: 23664:23667 ioctl 4018620d 200000c0 returned -16
[  430.077677][T23667] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:01 executing program 4:
syz_open_procfs(0x0, 0xfffffffffffffffe)
ioprio_set$pid(0x3, 0x0, 0x0)

18:17:01 executing program 1:
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0))
timerfd_settime(r2, 0x0, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0)
epoll_pwait(r1, &(0x7f0000000180), 0x0, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x2001})

18:17:01 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, 0x0, 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  430.273551][T23780] binder: BINDER_SET_CONTEXT_MGR already set
[  430.279715][T23780] binder: 23779:23780 ioctl 4018620d 200000c0 returned -16
18:17:01 executing program 1:
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

[  430.318777][T23780] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:01 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYPTR], 0x0, 0x0, 0x0})

[  430.457500][T23808] binder: BINDER_SET_CONTEXT_MGR already set
[  430.463773][T23808] binder: 23807:23808 ioctl 4018620d 20000080 returned -16
[  430.491813][T23808] binder: 23807:23808 unknown command 0
[  430.497764][T23808] binder: 23807:23808 ioctl c0306201 20000480 returned -22
18:17:01 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='clear_refs\x00')
pwritev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="1f", 0x1}], 0x1, 0x0)

18:17:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:01 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  430.528696][T23808] binder: BINDER_SET_CONTEXT_MGR already set
[  430.535054][T23808] binder: 23807:23808 ioctl 4018620d 20000080 returned -16
[  430.560193][T23878] binder: 23807:23878 unknown command 0
[  430.566082][T23878] binder: 23807:23878 ioctl c0306201 20000480 returned -22
[  430.639283][T23904] binder: BINDER_SET_CONTEXT_MGR already set
[  430.645551][T23904] binder: 23899:23904 ioctl 4018620d 200000c0 returned -16
[  430.674601][T23904] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:01 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, 0x0, 0x0, 0x0)

18:17:01 executing program 1:
r0 = syz_open_procfs(0x0, 0xfffffffffffffffe)
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200)

18:17:01 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='clear_refs\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
write$P9_RGETLOCK(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x1)

18:17:01 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)

18:17:01 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:01 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:02 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x3, 0x4)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000d12ffc))

18:17:02 executing program 1:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1f, 0x0, &(0x7f0000000140)})

[  430.965843][T23917] binder: BINDER_SET_CONTEXT_MGR already set
[  430.972136][T23917] binder: 23916:23917 ioctl 4018620d 200000c0 returned -16
[  431.014966][T23917] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x0, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000001580)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

18:17:02 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:02 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
fremovexattr(r0, &(0x7f0000000180)=@random={'security.', '.\x00'})

[  431.202136][T23960] binder: BINDER_SET_CONTEXT_MGR already set
[  431.208466][T23960] binder: 23953:23960 ioctl 4018620d 200000c0 returned -16
[  431.266769][T24019] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:02 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in, @in6=@mcast2}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x3], 0xffffffffffffffff}}}]}, 0x78}}, 0x0)

18:17:02 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000), 0x0, 0x0)

18:17:02 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:02 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:02 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000340)='/dev/input/event#\x00', 0xc000000000, 0x0)
ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040))

18:17:02 executing program 4:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)=[@free_buffer, @enter_looper, @register_looper], 0x0, 0x0, 0x0})

18:17:02 executing program 4:
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x2)

[  431.832513][T24056] binder: BINDER_SET_CONTEXT_MGR already set
[  431.838773][T24056] binder: 24055:24056 ioctl 4018620d 200000c0 returned -16
18:17:02 executing program 1:

[  431.875394][T24056] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:02 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:03 executing program 2:

18:17:03 executing program 4:

18:17:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:03 executing program 1:

[  432.083817][T24070] binder: BINDER_SET_CONTEXT_MGR already set
[  432.089990][T24070] binder: 24069:24070 ioctl 4018620d 200000c0 returned -16
18:17:03 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000200)="0800b5055e0bcfe87b0071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x2c, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}})
setsockopt$inet_buf(r1, 0x0, 0x12, 0x0, 0x0)

18:17:03 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000), 0x0, 0x0)

18:17:03 executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x9}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x100000b, 0x0, @ipv4={[], [], @multicast1}}, 0x1a)
sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002d40)}}, {{0x0, 0x56, &(0x7f0000000040), 0x395, &(0x7f0000000140)}}], 0x2, 0x0)

18:17:03 executing program 1:

18:17:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(0x0)
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:03 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  432.720018][T24094] binder: BINDER_SET_CONTEXT_MGR already set
[  432.726408][T24094] binder: 24093:24094 ioctl 4018620d 200000c0 returned -16
18:17:03 executing program 4:

18:17:03 executing program 1:

18:17:03 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:03 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:04 executing program 4:

18:17:04 executing program 1:

18:17:04 executing program 2:

[  432.964715][T24211] binder: BINDER_SET_CONTEXT_MGR already set
[  432.970991][T24211] binder: 24210:24211 ioctl 4018620d 200000c0 returned -16
18:17:04 executing program 4:

18:17:04 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000), 0x0, 0x0)

18:17:04 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:04 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:04 executing program 1:

18:17:04 executing program 2:

[  433.596969][T24228] binder: BINDER_SET_CONTEXT_MGR already set
[  433.603151][T24228] binder: 24225:24228 ioctl 4018620d 200000c0 returned -16
18:17:04 executing program 4:

18:17:04 executing program 1:

18:17:04 executing program 2:

[  433.646246][T24230] __nla_parse: 20 callbacks suppressed
[  433.646269][T24230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  433.661731][T24233] binder_alloc_new_buf_locked: 3 callbacks suppressed
[  433.661747][T24233] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:04 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:04 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  433.779582][T24230] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:04 executing program 1:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000280)={0x1}, 0xff7f)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
read(r3, &(0x7f0000000440)=""/250, 0x128b949d)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
fcntl$setstatus(r1, 0x4, 0x6100)
fdatasync(r0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r0})

18:17:04 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
geteuid()
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getresuid(0x0, 0x0, 0x0)
lstat(0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0)
getpeername(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, 0x0, 0xfef9)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)
select(0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x0)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet6(r1, &(0x7f00000008c0)='/', 0x1, 0x0, 0x0, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r2, &(0x7f0000000080), 0xfffffff3, 0x0, 0x0, 0x0)

[  433.890270][T24245] binder: BINDER_SET_CONTEXT_MGR already set
[  433.896628][T24245] binder: 24244:24245 ioctl 4018620d 200000c0 returned -16
18:17:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  433.946866][    C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  433.955784][T24245] binder_alloc: 20354: binder_alloc_buf, no vma
[  434.058315][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  434.106536][T24429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:05 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

18:17:05 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:05 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:05 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x104e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

[  434.548459][T24469] binder: BINDER_SET_CONTEXT_MGR already set
[  434.554712][T24469] binder: 24468:24469 ioctl 4018620d 200000c0 returned -16
[  434.581453][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  434.588243][T24469] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:05 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:05 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  434.639485][T24509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:05 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:05 executing program 2:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000300)=ANY=[@ANYBLOB="a9b800040042"])

[  434.779128][T24585] binder: BINDER_SET_CONTEXT_MGR already set
[  434.785407][T24585] binder: 24584:24585 ioctl 4018620d 200000c0 returned -16
[  434.868717][T24591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  434.877086][T24596] binder_alloc: 20354: binder_alloc_buf, no vma
[  434.914816][T24591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:06 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)

18:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  435.145250][T24609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  435.155728][T24609] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:06 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

18:17:06 executing program 1:
r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
write$P9_RREMOVE(r0, &(0x7f0000000280)={0x1}, 0xff7f)
r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(r2, 0x2081fc)
pipe(&(0x7f00000003c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f00000001c0), 0xfffffef3)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
read(r3, &(0x7f0000000440)=""/250, 0x128b949d)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9)
fcntl$setstatus(r1, 0x4, 0x6100)
fdatasync(r0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xf642e7e)
ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000200)={0x0, r0})

18:17:06 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:06 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)

18:17:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)

18:17:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:06 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x182)
r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0)
pwritev(r2, &(0x7f0000000340), 0x0, 0x0)
sendfile(r1, r1, 0x0, 0x24000000)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

[  435.533279][T24726] binder: BINDER_SET_CONTEXT_MGR already set
[  435.539584][T24726] binder: 24723:24726 ioctl 4018620d 200000c0 returned -16
[  435.595988][T24726] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:06 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:06 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@random="cdbf0e000084", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x30, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @dev}}}}}}}, 0x0)

18:17:06 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  435.814014][T24842] binder: BINDER_SET_CONTEXT_MGR already set
[  435.821675][T24842] binder: 24841:24842 ioctl 4018620d 200000c0 returned -16
[  435.916157][T24842] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:07 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00')
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)

18:17:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000880)={'syz1\x00'}, 0x45c)

18:17:07 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', 0x0, 0x0, 0x0)

18:17:07 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:07 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)

18:17:07 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  436.529939][T24865] binder: BINDER_SET_CONTEXT_MGR already set
[  436.537006][T24865] binder: 24864:24865 ioctl 4018620d 200000c0 returned -16
[  436.546562][T24865] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x0, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000013ff1)={&(0x7f0000000080)={0x14, 0x16, 0xae750254dc1b34c5}, 0x14}}, 0x0)

18:17:07 executing program 1:

[  436.705633][T24957] binder: BINDER_SET_CONTEXT_MGR already set
[  436.712212][T24957] binder: 24956:24957 ioctl 4018620d 200000c0 returned -16
18:17:07 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  436.798117][T24957] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:07 executing program 1:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000001100)=[{0x20006, 0x0, 0x0, 0xfffffffffffff7f8}]})
io_setup(0x23, &(0x7f00000003c0)=<r0=>0x0)
io_getevents(r0, 0x0, 0x0, 0x0, 0x0)

[  436.981268][   T30] audit: type=1326 audit(1560449828.021:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24988 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0xffff0000
18:17:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:08 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:08 executing program 2:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000001100)=[{0x20006, 0x0, 0x0, 0xfffffffffffff7f8}]})
time(0x0)

18:17:08 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071")
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0xff], 0x1f004})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0)

18:17:08 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)

[  437.269139][   T30] audit: type=1326 audit(1560449828.311:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0xffff0000
[  437.304492][T24993] binder: BINDER_SET_CONTEXT_MGR already set
[  437.310869][T24993] binder: 24992:24993 ioctl 4018620d 200000c0 returned -16
[  437.355771][T25002] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:08 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:08 executing program 3:
shmget$private(0x0, 0xf000, 0x0, &(0x7f0000ff0000/0xf000)=nil)
shmctl$IPC_STAT(0x0, 0x2, 0x0)
r0 = gettid()
prctl$PR_GET_UNALIGN(0x5, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
tkill(r0, 0x2001000000000016)

[  437.568897][T25016] binder: BINDER_SET_CONTEXT_MGR already set
[  437.575337][T25016] binder: 25015:25016 ioctl 4018620d 200000c0 returned -16
[  437.600608][T25016] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:08 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:08 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  437.724458][T25025] binder: BINDER_SET_CONTEXT_MGR already set
[  437.730822][T25025] binder: 25024:25025 ioctl 4018620d 200000c0 returned -16
[  437.764893][   T30] audit: type=1326 audit(1560449828.811:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24988 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0xffff0000
18:17:08 executing program 1:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x416, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, 0x0)

18:17:08 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:08 executing program 3:
dup(0xffffffffffffffff)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]})
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
sendfile(0xffffffffffffffff, r0, 0x0, 0x0)

[  437.964595][T25038] binder: BINDER_SET_CONTEXT_MGR already set
[  437.970829][T25038] binder: 25037:25038 ioctl 4018620d 200000c0 returned -16
[  438.067602][   T30] audit: type=1326 audit(1560449829.111:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=24994 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c10a code=0xffff0000
18:17:09 executing program 2:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4)
openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
gettid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = socket$kcm(0x29, 0x0, 0x0)
close(r1)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

18:17:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:09 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:09 executing program 1:
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0xa, 0x1000000000000001, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000300)='tasks\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
socket$kcm(0x11, 0x0, 0x300)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x10, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
close(r1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000240))

18:17:09 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:09 executing program 3:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40a08b, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x1, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x4800})
write$cgroup_int(r3, &(0x7f0000000280), 0x12)
write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x36)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

18:17:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:09 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x1, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
write$cgroup_int(r3, &(0x7f0000000280), 0x12)
write$cgroup_int(r3, &(0x7f0000000000)=0x1, 0x36)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0)

[  438.328348][T25128] binder: BINDER_SET_CONTEXT_MGR already set
[  438.334777][T25128] binder: 25101:25128 ioctl 4018620d 200000c0 returned -16
18:17:09 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00\f#\x9f\xd0\x85\xac\xc4\x9b\x81-\xb3\xd7=C\xea', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$P9_RREMOVE(r1, &(0x7f0000000180)={0x7}, 0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
write$P9_RSTATu(r1, &(0x7f0000000040)=ANY=[], 0x445144e9)
fdatasync(r1)
creat(0x0, 0x0)

18:17:09 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x23ae83774d6ac421, 0x0)

18:17:09 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000), 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:09 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:09 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:09 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0)
clone(0x70024000, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7a04, 0x0)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

18:17:09 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000006c0)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0})

[  438.646587][T25186] binder: BINDER_SET_CONTEXT_MGR already set
[  438.653442][T25186] binder: 25180:25186 ioctl 4018620d 200000c0 returned -16
18:17:09 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  438.721648][T25186] binder_alloc_new_buf_locked: 3 callbacks suppressed
[  438.721666][T25186] binder_alloc: 20354: binder_alloc_buf, no vma
[  438.790548][T25257] __nla_parse: 26 callbacks suppressed
[  438.790620][T25257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:09 executing program 2:
creat(&(0x7f0000000140)='./file0\x00', 0x0)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2000, 0x0)

18:17:09 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

18:17:09 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000), 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  438.866256][T25302] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:09 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:10 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}})
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x6})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070")
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/46, 0x2e}], 0x1)
dup3(r1, r0, 0x0)

18:17:10 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:cron_log_t:s0\x00', 0x20, 0x0)

18:17:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  439.075039][T25313] binder: BINDER_SET_CONTEXT_MGR already set
[  439.081200][T25313] binder: 25311:25313 ioctl 4018620d 200000c0 returned -16
18:17:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

[  439.139249][T25313] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:10 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:10 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000), 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:10 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0))
r1 = syz_open_pts(r0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070")
r3 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0x323)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000040))
r5 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r3, r5, 0x0, 0x8fff)
dup3(r1, r0, 0x0)

18:17:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

18:17:10 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
r0 = open$dir(&(0x7f0000001140)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/116, 0xfd87)

[  439.327700][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  439.348668][T25427] binder: BINDER_SET_CONTEXT_MGR already set
[  439.354919][T25427] binder: 25414:25427 ioctl 4018620d 200000c0 returned -16
[  439.404857][T25438] binder_alloc: 20354: binder_alloc_buf, no vma
[  439.411566][T25440] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:10 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:10 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(0x0, 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

18:17:10 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:10 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  439.707815][T25514] binder: BINDER_SET_CONTEXT_MGR already set
[  439.714123][T25514] binder: 25508:25514 ioctl 4018620d 200000c0 returned -16
18:17:10 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0x1d3)

18:17:10 executing program 1:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

[  439.794024][T25514] binder_alloc: 20354: binder_alloc_buf, no vma
[  439.837466][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:10 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(0x0, 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  439.900803][T25559] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:11 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  440.055129][T25626] binder: BINDER_SET_CONTEXT_MGR already set
[  440.061397][T25626] binder: 25623:25626 ioctl 4018620d 200000c0 returned -16
[  440.200699][T25626] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:11 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
syz_open_procfs(0x0, 0x0)

18:17:11 executing program 1:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

18:17:11 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00')
read$FUSE(r0, 0x0, 0x0)

18:17:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:11 executing program 4:
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:11 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(0x0, 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:11 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  440.366487][T25690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:11 executing program 1:
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

[  440.407575][T25690] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  440.459819][T25723] binder: BINDER_SET_CONTEXT_MGR already set
[  440.466132][T25723] binder: 25719:25723 ioctl 4018620d 200000c0 returned -16
18:17:11 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

[  440.527949][T25790] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:11 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, 0x0)
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:11 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x1}, 0x14}}, 0x0)

18:17:11 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:11 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:11 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  440.785567][T25823] binder: BINDER_SET_CONTEXT_MGR already set
[  440.791791][T25823] binder: 25821:25823 ioctl 4018620d 200000c0 returned -16
[  440.803654][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:11 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

[  440.855260][T25828] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  440.864662][T25857] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:12 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:12 executing program 2:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c)
openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0x800, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x80041, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x28, &(0x7f00000000c0)={0x0, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={r2, 0x1, 0xc}, 0xfdd0)
ioctl(r3, 0x8912, &(0x7f0000000480)="87b6553168fa7198e7000000003a000000000000")
mkdir(&(0x7f0000000640)='./file0\x00', 0x4)
r4 = open(&(0x7f00000005c0)='./file0\x00', 0x404408, 0x40)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x73ee18af, @mcast2, 0x31}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000000008800, 0x0)
r8 = dup3(r7, r6, 0x80002)
pipe(&(0x7f0000000700)={<r9=>0xffffffffffffffff})
pipe2(&(0x7f0000000440)={0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x84801)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0xe206)
r11 = inotify_init1(0x0)
perf_event_open$cgroup(&(0x7f0000000240)={0x1, 0x70, 0x4, 0x55, 0x6ee, 0x6, 0x0, 0x8000, 0x11000, 0x0, 0xfffffffffffffffa, 0x9, 0x7, 0x9, 0x4, 0x4, 0x400, 0x3f, 0x80036c2, 0x4, 0x1, 0x8, 0x9, 0x101, 0x8, 0x7, 0x3, 0x3, 0x9, 0x3ff, 0x182, 0x9, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x0, 0x0, 0x0, 0x8000000, 0x1000, 0x8, 0x401}, r10, 0x8, 0xffffffffffffff9c, 0x1)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000004c0))
inotify_add_watch(r11, &(0x7f0000ac5000)='./bus\x00', 0xa400295c)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0)
open(&(0x7f0000000680)='./file0\x00', 0x450803, 0x0)
ioctl$TIOCLINUX5(r9, 0x541c, &(0x7f0000000580)={0x5, 0x188, 0x9, 0x9, 0x5})
r12 = socket$inet6(0xa, 0x2, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000001, 0x2a813, r4, 0x0)
setsockopt$inet6_int(r9, 0x29, 0x2, 0x0, 0x39c)
fcntl$setlease(r5, 0x400, 0x40000002)
ioctl$sock_inet_SIOCGIFADDR(r8, 0x8915, &(0x7f00000002c0)={'60\x8d\xbc\x8b1\x93\xe5\xdb\xe4\xeecdge\x00', {0x2, 0x4e24, @multicast2}})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x0, 0x0, 0x102, 0x1, 0x0, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x400, 0x0, 0x3, 0x3, 0x8}, 0x20)
r13 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7')
sendfile(r13, r13, &(0x7f0000000140)=0x202, 0xcd)

18:17:12 executing program 4:
r0 = socket$inet(0x2, 0x0, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:12 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x200000000000002)

[  441.169924][T25943] binder: BINDER_SET_CONTEXT_MGR already set
[  441.176317][T25943] binder: 25942:25943 ioctl 4018620d 200000c0 returned -16
18:17:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:12 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

[  441.264477][T25943] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:12 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:12 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:12 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0xc0000100]})

18:17:12 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

[  441.497559][T26065] binder: BINDER_SET_CONTEXT_MGR already set
[  441.504110][T26065] binder: 26061:26065 ioctl 4018620d 200000c0 returned -16
18:17:12 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  441.594029][T26072] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:12 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:12 executing program 1:
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x200000000000002)

18:17:12 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:12 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, 0x0)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  441.866436][T26167] binder: BINDER_SET_CONTEXT_MGR already set
[  441.872671][T26167] binder: 26162:26167 ioctl 4018620d 200000c0 returned -16
18:17:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)

18:17:13 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000680)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)

18:17:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  442.029763][T26167] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x0)
dup2(r2, r1)

18:17:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, 0x0)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)

18:17:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:13 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)

[  442.344093][T26230] binder: BINDER_SET_CONTEXT_MGR already set
[  442.350834][T26230] binder: 26228:26230 ioctl 4018620d 200000c0 returned -16
18:17:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:13 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(0x0, 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, 0x0)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:13 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0xc0010141]})

18:17:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  442.649985][T26347] binder: BINDER_SET_CONTEXT_MGR already set
[  442.656326][T26347] binder: 26343:26347 ioctl 4018620d 200000c0 returned -16
18:17:13 executing program 2:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x400000000006, 0x0, 0x0, 0xa5})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

18:17:13 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:13 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:13 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:13 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000), 0x0)

18:17:14 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:14 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:14 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802})
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x1b, &(0x7f0000000040)=r3, 0x52d)
mkdir(&(0x7f0000000500)='./file0/file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
recvmsg$kcm(r2, &(0x7f0000009980)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000099c0)={0x0, 0x0, 0x1, 0xdf4a, 0x42, r0, 0x6, [], 0x0, r2, 0x0, 0x4}, 0x3c)
close(r3)
r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(r2, 0x0, 0x0, 0x0)
mkdir(0x0, 0xfffff7fffffffffc)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x14, 0x200000000000000, 0x7, 0x0, 0x0, 0xffffffffffffff9c, 0x3, [], 0x0, r4, 0x0, 0x7fff}, 0x3c)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f00000000c0)}, 0x0)
close(r1)
r6 = perf_event_open(&(0x7f0000000340)={0x7, 0x70, 0x1, 0x4, 0x6, 0xfffffffffffffffe, 0x0, 0x20, 0x80000, 0x0, 0x4, 0x0, 0x100, 0xfff, 0x1500, 0xffffffff, 0xf8c2, 0x4, 0xff, 0x11, 0x2, 0x9, 0x6, 0x4, 0x8, 0x6, 0x64, 0x400, 0x5076, 0x100000000, 0x100000001, 0x2, 0x2, 0xbab, 0x5, 0x20, 0x100000000, 0x8, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x1}, 0x8000, 0x1, 0x4, 0x9, 0x100, 0x8000}, 0x0, 0xc, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0)
recvmsg$kcm(r2, &(0x7f00000126c0)={&(0x7f0000011140)=@hci, 0x80, &(0x7f0000011640)=[{0x0}, {&(0x7f0000011480)=""/66, 0x42}, {&(0x7f0000011500)=""/129, 0x81}, {&(0x7f00000115c0)=""/126, 0x7e}], 0x4, &(0x7f00000116c0)=""/4096, 0x1000}, 0x0)
socket$kcm(0x29, 0x10843cc4ffc178d, 0x0)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x10, 0x5, 0xf003, 0x0, 0x32, r2, 0x0, [], 0x0, r4, 0x8, 0x3}, 0x3c)
socket$kcm(0x10, 0x0, 0x4)
openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0)

18:17:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  443.090260][T26378] binder: BINDER_SET_CONTEXT_MGR already set
[  443.096640][T26378] binder: 26377:26378 ioctl 4018620d 200000c0 returned -16
18:17:14 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x0, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:14 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x200, 0x80000000000004, 0x0, 0x0}, 0x2c)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000000180)='J', 0x0}, 0x18)

18:17:14 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x0)

18:17:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  443.393185][T26491] binder: BINDER_SET_CONTEXT_MGR already set
[  443.399452][T26491] binder: 26490:26491 ioctl 4018620d 200000c0 returned -16
18:17:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:14 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:14 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:14 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070")
ioctl$FICLONE(r0, 0x40049409, r0)

18:17:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  443.674181][T26560] binder: BINDER_SET_CONTEXT_MGR already set
[  443.680366][T26560] binder: 26548:26560 ioctl 4018620d 200000c0 returned -16
18:17:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:14 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x0, r4})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x21}, 0x1a, r4})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

18:17:14 executing program 3:
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  443.770666][T26612] binder_alloc_new_buf_locked: 4 callbacks suppressed
[  443.770684][T26612] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:14 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:14 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:15 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpid()
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8910, &(0x7f0000000000))
socketpair(0x1a, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)

18:17:15 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x0, r4})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x21}, 0x1a, r4})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

[  444.019545][T26639] __nla_parse: 18 callbacks suppressed
[  444.019568][T26639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:15 executing program 3:
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x0, r4})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x21}, 0x1a, r4})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

[  444.112852][T26645] binder: BINDER_SET_CONTEXT_MGR already set
[  444.119019][T26645] binder: 26642:26645 ioctl 4018620d 200000c0 returned -16
[  444.137357][T26650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:15 executing program 3:
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  444.186514][T26657] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:15 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x0, r4})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x21}, 0x1a, r4})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

18:17:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  444.474409][T26755] binder: BINDER_SET_CONTEXT_MGR already set
[  444.480945][T26755] binder: 26731:26755 ioctl 4018620d 200000c0 returned -16
[  444.505241][T26764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:15 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x3c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00')

18:17:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x0, r4})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

18:17:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  444.572961][T26755] binder_alloc: 20354: binder_alloc_buf, no vma
[  444.585857][T26782] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:15 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:15 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001fc0)={'ip_vti0\x00', <r4=>0x0})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34", r4}, 0x14)

18:17:15 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:15 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:15 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  444.801386][T26796] binder: BINDER_SET_CONTEXT_MGR already set
[  444.807686][T26796] binder: 26795:26796 ioctl 4018620d 200000c0 returned -16
[  444.906803][T26839] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  444.966950][T26880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:16 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:16 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}, 0x3c)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00')

[  445.084964][T26917] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

[  445.167804][T26920] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:16 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
pipe(&(0x7f0000000280))
close(0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
clone(0x4000500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x6, 0x2b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

18:17:16 executing program 3:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:16 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

[  445.434765][T26944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  445.470841][T26944] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000007a00)="0800b5055e0bcfe87b0071")
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:16 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

18:17:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  445.485410][T26946] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:16 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:16 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:16 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:16 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  445.765292][T27042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:16 executing program 2:

[  445.828552][T27072] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  445.846012][T27070] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:16 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:16 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
dup(r0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:17 executing program 2:

[  446.084745][T27084] binder: BINDER_SET_CONTEXT_MGR already set
[  446.090899][T27084] binder: 27081:27084 ioctl 4018620d 200000c0 returned -16
[  446.117128][T27084] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:17 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:17 executing program 2:

18:17:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x2})
fcntl$getownex(r3, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  446.347685][T27104] binder: BINDER_SET_CONTEXT_MGR already set
[  446.354104][T27104] binder: 27103:27104 ioctl 4018620d 200000c0 returned -16
18:17:17 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

[  446.415921][T27104] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:17 executing program 2:

18:17:17 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x2})
fcntl$getownex(r3, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:17 executing program 1:
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:17 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

[  446.672425][T27124] binder: BINDER_SET_CONTEXT_MGR already set
[  446.679003][T27124] binder: 27123:27124 ioctl 4018620d 200000c0 returned -16
18:17:17 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:17 executing program 2:

18:17:17 executing program 1:
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:17 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000300))
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r5, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, 0xffffffffffffffff, &(0x7f00000002c0)={0x2})
fcntl$getownex(r3, 0x10, &(0x7f0000000500))
pread64(r6, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  446.831060][T27124] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:17 executing program 2:

18:17:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:18 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:18 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:18 executing program 2:

18:17:18 executing program 2:

18:17:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  447.142828][T27155] binder: BINDER_SET_CONTEXT_MGR already set
[  447.149188][T27155] binder: 27152:27155 ioctl 4018620d 200000c0 returned -16
18:17:18 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:18 executing program 1:
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:18 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:18 executing program 2:

18:17:18 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

[  447.403083][T27180] binder: BINDER_SET_CONTEXT_MGR already set
[  447.409319][T27180] binder: 27177:27180 ioctl 4018620d 200000c0 returned -16
18:17:18 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:18 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x7b, 0x0, [0x4b564d03]})

18:17:18 executing program 2:

[  447.645035][T27187] binder: BINDER_SET_CONTEXT_MGR already set
[  447.651379][T27187] binder: 27186:27187 ioctl 4018620d 200000c0 returned -16
18:17:18 executing program 2:

18:17:18 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:18 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:18 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

18:17:18 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, 0x0)
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:18 executing program 2:

[  447.988302][T27214] binder: BINDER_SET_CONTEXT_MGR already set
[  447.994707][T27214] binder: 27210:27214 ioctl 4018620d 200000c0 returned -16
18:17:19 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x1)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0071d)

18:17:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

18:17:19 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:19 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0))
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:19 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, 0x0)

[  448.512624][T27236] binder: BINDER_SET_CONTEXT_MGR already set
[  448.518782][T27236] binder: 27235:27236 ioctl 4018620d 200000c0 returned -16
18:17:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x4b564d03]})

18:17:19 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:19 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0))
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:19 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x4b564d03]})

[  448.775526][T27254] binder: BINDER_SET_CONTEXT_MGR already set
[  448.781756][T27254] binder: 27253:27254 ioctl 4018620d 200000c0 returned -16
[  448.815147][T27254] binder_alloc_new_buf_locked: 5 callbacks suppressed
[  448.815213][T27254] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:20 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x0, 0x0, 0x0)
getsockopt$inet_int(r0, 0x0, 0x43, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007d7)

18:17:20 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0))
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:20 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x0, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:20 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)="1a", 0x1}], 0x1}}], 0x1, 0x0)

18:17:20 executing program 1:
socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x0, 0x0, [0x4b564d03]})

18:17:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

[  449.434635][T27378] __nla_parse: 18 callbacks suppressed
[  449.434656][T27378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  449.465099][T27381] binder: BINDER_SET_CONTEXT_MGR already set
[  449.471276][T27381] binder: 27374:27381 ioctl 4018620d 200000c0 returned -16
18:17:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b})

[  449.501577][T27384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  449.513565][T27381] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:20 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x0, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  449.666322][T27394] binder: BINDER_SET_CONTEXT_MGR already set
[  449.672660][T27394] binder: 27393:27394 ioctl 4018620d 200000c0 returned -16
[  449.714486][T27394] binder_alloc: 20354: binder_alloc_buf, no vma
[  449.785433][T27400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  449.811295][T27400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:20 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r0, 0x0, 0xfffffffffffffe8f, 0x0, 0x0, 0x800e00aa8)
recvfrom$inet(r0, 0x0, 0x34dae5f8, 0x2, 0x0, 0x800e00641)
shutdown(r0, 0x0)

18:17:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b})

18:17:20 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000180)={@rand_addr="ebda4d38b8b2ce0f84a91b121502bf34"}, 0x14)

18:17:21 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

18:17:21 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x0, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:21 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = dup(r0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000280)={0x7b})

18:17:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

18:17:21 executing program 2:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
r1 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r2 = getpgrp(0xffffffffffffffff)
fcntl$setown(r1, 0x6, r2)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00ba7)

18:17:21 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0)
fcntl$getflags(0xffffffffffffffff, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e0071d)

[  450.365846][T27618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  450.376372][T27624] binder: BINDER_SET_CONTEXT_MGR already set
[  450.382853][T27624] binder: 27622:27624 ioctl 4018620d 200000c0 returned -16
[  450.401533][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

[  450.464302][T27684] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:21 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x1df, 0x0, 0x0, 0xcb)
recvfrom$inet(r0, 0x0, 0x7f8ad630, 0x0, 0x0, 0x800e0070a)
shutdown(r0, 0x0)

18:17:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:21 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:21 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, 0x0, 0x0)

[  450.669906][T27742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  450.708296][T27742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  450.722999][T27745] binder: BINDER_SET_CONTEXT_MGR already set
[  450.729160][T27745] binder: 27744:27745 ioctl 4018620d 200000c0 returned -16
[  450.743019][T27745] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:22 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

18:17:22 executing program 1:

18:17:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, 0x0)
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:22 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:22 executing program 2:

18:17:22 executing program 1:

[  451.240212][T27860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  451.258535][T27858] binder: BINDER_SET_CONTEXT_MGR already set
[  451.264824][T27858] binder: 27857:27858 ioctl 4018620d 200000c0 returned -16
[  451.276015][T27860] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  451.295525][T27858] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:22 executing program 3:

18:17:22 executing program 2:

18:17:22 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:22 executing program 1:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
lseek(r0, 0x0, 0x3)
recvfrom$inet(r0, 0x0, 0x0, 0x2, 0x0, 0x800e00568)

18:17:22 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, 0x0)
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:22 executing program 2:

[  451.535608][T27874] binder: BINDER_SET_CONTEXT_MGR already set
[  451.541780][T27874] binder: 27873:27874 ioctl 4018620d 200000c0 returned -16
[  451.583995][T27874] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)

18:17:23 executing program 3:

18:17:23 executing program 2:

18:17:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, 0x0)
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:23 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:23 executing program 2:

18:17:23 executing program 3:

[  452.173320][T27894] binder: BINDER_SET_CONTEXT_MGR already set
[  452.179427][T27894] binder: 27891:27894 ioctl 4018620d 200000c0 returned -16
18:17:23 executing program 2:

18:17:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(0xffffffffffffffff, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  452.257740][T27894] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:23 executing program 1:

18:17:23 executing program 3:

18:17:23 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  452.527105][T27914] binder: BINDER_SET_CONTEXT_MGR already set
[  452.533343][T27914] binder: 27913:27914 ioctl 4018620d 200000c0 returned -16
[  452.545592][T27914] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:23 executing program 1:

18:17:23 executing program 2:

18:17:23 executing program 3:

18:17:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340), 0x0, 0x0)

18:17:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(0xffffffffffffffff, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:23 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:24 executing program 3:

18:17:24 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x11, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c4000000000000100000098630920"], 0x0, 0x0, 0x0})

18:17:24 executing program 2:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000140)={0x0, {0x0, 0x401}})

[  453.051843][T27935] binder: BINDER_SET_CONTEXT_MGR already set
[  453.059178][T27935] binder: 27923:27935 ioctl 4018620d 200000c0 returned -16
18:17:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(0xffffffffffffffff, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:24 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x0)

[  453.106425][T27940] binder: 27938:27940 unknown command 32
[  453.112230][T27940] binder: 27938:27940 ioctl c0306201 20000140 returned -22
[  453.163324][T27927] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:24 executing program 1:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
fchown(r1, 0x0, 0x0)

18:17:24 executing program 2:

18:17:24 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:24 executing program 3:

[  453.437537][T27959] binder: BINDER_SET_CONTEXT_MGR already set
[  453.444016][T27959] binder: 27957:27959 ioctl 4018620d 200000c0 returned -16
18:17:24 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340), 0x0, 0x0)

18:17:24 executing program 2:
syslog(0x2, &(0x7f00000000c0)=""/80, 0x50)

18:17:24 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:24 executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00')
read(r0, 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/230, 0x20000346)

18:17:24 executing program 1:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
r0 = open$dir(&(0x7f0000001140)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000100)=""/116, 0xfd87)
getdents64(r0, 0x0, 0x0)

18:17:24 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  453.869916][T27972] binder: BINDER_SET_CONTEXT_MGR already set
[  453.876231][T27972] binder: 27971:27972 ioctl 4018620d 200000c0 returned -16
18:17:24 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
syz_open_pts(r0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070")
r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0)
dup3(r2, r0, 0x0)

18:17:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:25 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x100000, 0x0)
clone(0x70024000, 0x0, 0x0, 0x0, 0x0)

[  453.911830][T27972] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  453.911901][T27972] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:25 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:25 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:25 executing program 3:

[  454.128414][T27999] binder: BINDER_SET_CONTEXT_MGR already set
[  454.134692][T27999] binder: 27998:27999 ioctl 4018620d 200000c0 returned -16
[  454.164566][T27999] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:25 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340), 0x0, 0x0)

18:17:25 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, 0x0, &(0x7f0000000340))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:25 executing program 2:

18:17:25 executing program 3:

18:17:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:25 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:25 executing program 2:

[  454.791367][T28115] binder: BINDER_SET_CONTEXT_MGR already set
[  454.797757][T28115] binder: 28109:28115 ioctl 4018620d 200000c0 returned -16
[  454.825630][T28117] __nla_parse: 14 callbacks suppressed
[  454.825652][T28117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:25 executing program 3:

18:17:25 executing program 2:

[  454.887575][T28115] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:26 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070")
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x7b)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r2, 0x0, 0x10, 0x0)

18:17:26 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, 0x0, &(0x7f0000000340))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:26 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

[  454.939087][T28117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  455.148900][T28138] binder: BINDER_SET_CONTEXT_MGR already set
[  455.155219][T28138] binder: 28137:28138 ioctl 4018620d 200000c0 returned -16
[  455.176140][T28138] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:26 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

18:17:26 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:26 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, 0x0, &(0x7f0000000340))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:26 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000))
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:26 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

[  455.665951][T28146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  455.676888][T28151] binder: BINDER_SET_CONTEXT_MGR already set
[  455.683205][T28151] binder: 28147:28151 ioctl 4018620d 200000c0 returned -16
[  455.697877][T28146] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  455.708986][T28151] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:26 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:26 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:26 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "92581f145347c1fc1c5e22e12987d9b1baa441325a82884878dbcbc93143996c540c13cbf0c67b6c033670f20f6af953ef811a530300fa84e4f61040b58f4d0be9048b4d1d7ab6837dbcce59819db0df54"}, 0xc9)
sendto$inet(r0, &(0x7f00000009c0)="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", 0x138, 0x0, 0x0, 0x0)

18:17:26 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
read(r0, 0x0, 0x0)

18:17:26 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

[  455.891274][T28260] binder: BINDER_SET_CONTEXT_MGR already set
[  455.897898][T28260] binder: 28259:28260 ioctl 4018620d 200000c0 returned -16
[  455.980922][T28272] binder_alloc: 20354: binder_alloc_buf, no vma
[  456.008598][T28269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  456.033490][T28269] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:27 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:27 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

18:17:27 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:27 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:27 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:27 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1ad, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00')
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:27 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

[  456.555305][T28390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  456.588831][T28389] binder: BINDER_SET_CONTEXT_MGR already set
[  456.595242][T28389] binder: 28388:28389 ioctl 4018620d 200000c0 returned -16
[  456.613859][T28462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  456.620582][T28389] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:27 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:27 executing program 2:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:27 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

[  456.809393][T28502] binder: BINDER_SET_CONTEXT_MGR already set
[  456.815576][T28502] binder: 28500:28502 ioctl 4018620d 200000c0 returned -16
[  456.897769][T28505] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:28 executing program 3:
syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00')

18:17:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:28 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  457.193952][T28620] binder: BINDER_SET_CONTEXT_MGR already set
[  457.200443][T28621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  457.201624][T28620] binder: 28616:28620 ioctl 4018620d 200000c0 returned -16
[  457.227865][T28621] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  457.232839][T28620] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:28 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

18:17:28 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:28 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070")
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo/4\x00')

18:17:28 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:28 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffdb7, 0x0, &(0x7f0000000300)=[@clear_death, @decrefs], 0x0, 0x0, 0x0})

18:17:28 executing program 3:
clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$getenv(0x4201, r0, 0x0, 0x0)

[  457.433622][T28630] binder: BINDER_SET_CONTEXT_MGR already set
[  457.439876][T28630] binder: 28629:28630 ioctl 4018620d 200000c0 returned -16
18:17:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  457.507837][T28630] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:28 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000003c0))
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

[  457.687517][T28751] binder: BINDER_SET_CONTEXT_MGR already set
[  457.693960][T28751] binder: 28750:28751 ioctl 4018620d 200000c0 returned -16
18:17:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  457.851540][T28813] binder: 28809:28813 ioctl c0306201 0 returned -14
18:17:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:29 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:29 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)}}], 0x1, 0x0)

18:17:29 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x3d, 0x0)
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

18:17:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  458.291300][T28871] binder: 28870:28871 ioctl c0306201 0 returned -14
[  458.301512][T28866] binder: BINDER_SET_CONTEXT_MGR already set
[  458.307744][T28866] binder: 28865:28866 ioctl 4018620d 200000c0 returned -16
18:17:29 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x30, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netlink\x00')
preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

18:17:29 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:29 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
stat(&(0x7f00000007c0)='./file0/file0\x00', 0x0)

18:17:29 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00')
utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

[  458.645986][T28989] binder: 28986:28989 ioctl c0306201 0 returned -14
[  458.684847][T28992] binder: BINDER_SET_CONTEXT_MGR already set
18:17:29 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0)

[  458.690942][T28992] binder: 28991:28992 ioctl 4018620d 200000c0 returned -16
18:17:29 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:30 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)}}], 0x1, 0x0)

18:17:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

18:17:30 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000240)=""/148, 0x94}], 0x1ad, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00')
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/159}, {&(0x7f00000013c0)=""/4096}], 0x400, 0x0)

18:17:30 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:30 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="7f454c4600000000000000040000000000000000000000000000000000000000400000000000000000000000000000000000000000003800"/201], 0xc9)
write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

18:17:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  459.209156][T29017] binder: BINDER_SET_CONTEXT_MGR already set
[  459.215476][T29017] binder: 29016:29017 ioctl 4018620d 200000c0 returned -16
18:17:30 executing program 3:

18:17:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  459.296806][T29017] binder_alloc_new_buf_locked: 3 callbacks suppressed
[  459.296825][T29017] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:30 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000500))
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:30 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:30 executing program 3:

[  459.591750][T29139] binder: BINDER_SET_CONTEXT_MGR already set
[  459.598075][T29139] binder: 29138:29139 ioctl 4018620d 200000c0 returned -16
[  459.607788][T29139] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:31 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)}}], 0x1, 0x0)

18:17:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death], 0x0, 0x0, 0x0})

18:17:31 executing program 2:

18:17:31 executing program 3:

18:17:31 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000500))
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:31 executing program 3:

18:17:31 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death], 0x0, 0x0, 0x0})

18:17:31 executing program 2:

[  460.155863][T29152] __nla_parse: 14 callbacks suppressed
[  460.155888][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  460.179244][T29153] binder: BINDER_SET_CONTEXT_MGR already set
[  460.185570][T29153] binder: 29151:29153 ioctl 4018620d 200000c0 returned -16
[  460.221003][T29161] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  460.236783][T29153] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:31 executing program 3:

18:17:31 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000500))
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:31 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000))
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  460.461907][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  460.502857][T29174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  460.516099][T29173] binder: BINDER_SET_CONTEXT_MGR already set
[  460.522266][T29173] binder: 29170:29173 ioctl 4018620d 200000c0 returned -16
[  460.535599][T29173] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000300)=[@clear_death], 0x0, 0x0, 0x0})

18:17:32 executing program 3:

18:17:32 executing program 2:

18:17:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}}], 0x1, 0x0)

18:17:32 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000))
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:32 executing program 2:

[  461.049644][T29185] binder: BINDER_SET_CONTEXT_MGR already set
[  461.055914][T29185] binder: 29183:29185 ioctl 4018620d 200000c0 returned -16
[  461.094372][T29188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  461.105902][T29185] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:32 executing program 3:

18:17:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@decrefs], 0x0, 0x0, 0x0})

18:17:32 executing program 2:

[  461.145731][T29194] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:32 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:32 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
umount2(&(0x7f0000000180)='./file0\x00', 0x1)

18:17:32 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00')

18:17:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000))
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  461.395861][T29205] binder: BINDER_SET_CONTEXT_MGR already set
[  461.401964][T29205] binder: 29203:29205 ioctl 4018620d 200000c0 returned -16
[  461.445095][T29205] binder_alloc: 20354: binder_alloc_buf, no vma
[  461.529367][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  461.540099][T29222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:32 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}}], 0x1, 0x0)

18:17:32 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@decrefs], 0x0, 0x0, 0x0})

18:17:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x0, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x26, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09631040010000000000000000000000000000000e630c400100000000000000000000000d63"], 0x0, 0x0, 0x0})

18:17:32 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, 0x0)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:32 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:32 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}<B\xfc.\x9cia\x14\xa6\xf8\x88\xf0\xda\x85\'v\x83\xcf\xc1\xc4\xd2\xbfq\xc2U\xa3\x13Md\xcc?\xed\x8e\x97y\x8d\xeb\x861\xcb\xf7h,\x9f\xa2\xed\x03\x14e\xaa\x19\x1d\xf9\"\xf7d)|\xba\"\xa8I\x9d\x17\x7fI\xfb\xa9@\xf5[\xbc\x8br?\xd3t\xf1\xfe\xd7\x8c\x8a\xee\xc6\x81\x1d\x9bXyHs\x87\xd5e\x94\xa1L%\x88\'M\xe8O\xa2v\x100+?\xb5Ar\xa8\xc9\x10\xa0~|v\xeaFZ\xa6\x84\x02', 0x0, 0x0)
lstat(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180))

[  461.973708][T29332] binder: BINDER_SET_CONTEXT_MGR already set
[  461.980043][T29332] binder: 29327:29332 ioctl 4018620d 20000080 returned -16
[  461.997832][T29324] binder: BINDER_SET_CONTEXT_MGR already set
[  462.004175][T29324] binder: 29323:29324 ioctl 4018620d 200000c0 returned -16
[  462.014266][T29325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:33 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$RTC_WKALM_RD(r0, 0x80287010, 0x0)

18:17:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@decrefs], 0x0, 0x0, 0x0})

[  462.015704][T29332] binder: BINDER_SET_CONTEXT_MGR already set
[  462.029867][T29332] binder: 29327:29332 ioctl 4018620d 20000080 returned -16
[  462.039431][T29324] binder_alloc: 20354: binder_alloc_buf, no vma
[  462.058420][T29325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:33 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:33 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x0, &(0x7f0000000180)='sysfs\x00')

18:17:33 executing program 1:

18:17:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

[  462.292031][T29445] binder: BINDER_SET_CONTEXT_MGR already set
[  462.299933][T29445] binder: 29444:29445 ioctl 4018620d 200000c0 returned -16
[  462.312747][T29449] e cgroup2: Unknown parameter 'sysfs'
[  462.393124][T29445] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:33 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}}], 0x1, 0x0)

18:17:33 executing program 3:

18:17:33 executing program 2:

18:17:33 executing program 1:

18:17:33 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:33 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(0x0, &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:33 executing program 3:

18:17:34 executing program 1:

18:17:34 executing program 2:

[  462.880794][T29462] binder: BINDER_SET_CONTEXT_MGR already set
[  462.887063][T29462] binder: 29460:29462 ioctl 4018620d 200000c0 returned -16
[  462.906501][T29462] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', 0x0, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:34 executing program 1:

18:17:34 executing program 2:

18:17:34 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x0)

18:17:34 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:34 executing program 3:

18:17:34 executing program 2:

18:17:34 executing program 1:

18:17:34 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', 0x0, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:34 executing program 3:

18:17:34 executing program 1:

[  463.836679][T29490] binder: BINDER_SET_CONTEXT_MGR already set
[  463.842901][T29490] binder: 29488:29490 ioctl 4018620d 200000c0 returned -16
18:17:34 executing program 2:

[  463.895300][T29490] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:35 executing program 3:

18:17:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', 0x0, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:35 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, 0x0, &(0x7f0000000580))
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  464.200634][T29515] binder: BINDER_SET_CONTEXT_MGR already set
[  464.207118][T29515] binder: 29514:29515 ioctl 4018620d 200000c0 returned -16
18:17:35 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x0)

18:17:35 executing program 1:

18:17:35 executing program 3:

18:17:35 executing program 2:

18:17:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:35 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, 0x0, &(0x7f0000000580))
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:35 executing program 1:

18:17:35 executing program 2:

[  464.748109][T29525] binder: BINDER_SET_CONTEXT_MGR already set
[  464.754349][T29525] binder: 29518:29525 ioctl 4018620d 200000c0 returned -16
18:17:35 executing program 3:

[  464.790244][T29525] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  464.790261][T29525] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:35 executing program 2:

18:17:35 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:35 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, 0x0, &(0x7f0000000580))
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  464.999770][T29538] binder: BINDER_SET_CONTEXT_MGR already set
[  465.006053][T29538] binder: 29537:29538 ioctl 4018620d 200000c0 returned -16
[  465.051913][T29538] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:36 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
recvfrom$inet(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x0)

18:17:36 executing program 1:

18:17:36 executing program 3:

18:17:36 executing program 2:

18:17:36 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:36 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b112378bc0bca5bddd", 0xd2, 0xfffffffffffffffd)

18:17:36 executing program 3:

18:17:36 executing program 2:

18:17:36 executing program 1:

[  465.671331][T29554] __nla_parse: 14 callbacks suppressed
[  465.671353][T29554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  465.675284][T29553] binder: BINDER_SET_CONTEXT_MGR already set
[  465.692625][T29553] binder: 29547:29553 ioctl 4018620d 200000c0 returned -16
18:17:36 executing program 1:

[  465.734508][T29554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  465.772859][T29553] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:36 executing program 3:

18:17:36 executing program 2:

18:17:37 executing program 2:

18:17:37 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)

18:17:37 executing program 1:

18:17:37 executing program 3:

18:17:37 executing program 4:

18:17:37 executing program 2:

18:17:37 executing program 1:

18:17:37 executing program 3:

[  466.556498][T29580] binder: BINDER_SET_CONTEXT_MGR already set
[  466.562880][T29580] binder: 29579:29580 ioctl 4018620d 200000c0 returned -16
[  466.574573][T29582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:37 executing program 4:

[  466.620244][T29582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:37 executing program 2:

18:17:37 executing program 3:

[  466.694898][T29580] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:37 executing program 1:

18:17:37 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:37 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)

18:17:37 executing program 4:

18:17:37 executing program 2:

18:17:37 executing program 1:

18:17:38 executing program 3:

18:17:38 executing program 4:

18:17:38 executing program 2:

[  467.066799][T29605] binder: BINDER_SET_CONTEXT_MGR already set
[  467.073068][T29605] binder: 29602:29605 ioctl 4018620d 200000c0 returned -16
[  467.086716][T29613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:38 executing program 4:

[  467.124377][T29605] binder_alloc: 20354: binder_alloc_buf, no vma
[  467.129198][T29613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:38 executing program 3:

18:17:38 executing program 1:

18:17:38 executing program 2:

18:17:38 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)

18:17:38 executing program 1:

18:17:38 executing program 3:

18:17:38 executing program 4:

18:17:38 executing program 2:

[  467.416433][T29626] binder: BINDER_SET_CONTEXT_MGR already set
[  467.422692][T29626] binder: 29625:29626 ioctl 4018620d 200000c0 returned -16
18:17:38 executing program 1:

18:17:38 executing program 4:

[  467.494599][T29626] binder_alloc: 20354: binder_alloc_buf, no vma
[  467.524073][T29630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:38 executing program 3:

18:17:38 executing program 1:

[  467.600512][T29641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:38 executing program 2:

18:17:38 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:38 executing program 3:

[  467.794217][T29649] binder: BINDER_SET_CONTEXT_MGR already set
[  467.800402][T29649] binder: 29648:29649 ioctl 4018620d 200000c0 returned -16
18:17:38 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880), 0x0, 0xfffffffffffffffd)

18:17:38 executing program 4:

18:17:38 executing program 1:

18:17:38 executing program 2:

[  467.906725][T29649] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:39 executing program 3:

18:17:39 executing program 4:

18:17:39 executing program 1:

18:17:39 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:39 executing program 2:

[  468.011011][T29661] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  468.070870][T29667] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:39 executing program 3:

18:17:39 executing program 2:

18:17:39 executing program 1:

[  468.217737][T29672] binder: BINDER_SET_CONTEXT_MGR already set
[  468.224148][T29672] binder: 29671:29672 ioctl 4018620d 200000c0 returned -16
18:17:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880), 0x0, 0xfffffffffffffffd)

18:17:39 executing program 4:

18:17:39 executing program 2:

18:17:39 executing program 3:

[  468.312883][T29672] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:39 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:39 executing program 4:

18:17:39 executing program 1:

18:17:39 executing program 2:

18:17:39 executing program 4:

[  468.542731][T29691] binder: BINDER_SET_CONTEXT_MGR already set
[  468.548894][T29691] binder: 29686:29691 ioctl 4018620d 200000c0 returned -16
18:17:39 executing program 3:

[  468.603042][T29691] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:39 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880), 0x0, 0xfffffffffffffffd)

18:17:39 executing program 1:

18:17:39 executing program 2:

18:17:39 executing program 4:

18:17:39 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:39 executing program 1:

18:17:39 executing program 3:

18:17:39 executing program 4:

18:17:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a7", 0x69, 0xfffffffffffffffd)

[  468.948528][T29711] binder: BINDER_SET_CONTEXT_MGR already set
[  468.954853][T29711] binder: 29710:29711 ioctl 4018620d 200000c0 returned -16
18:17:40 executing program 2:

[  468.997609][T29711] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:40 executing program 3:

18:17:40 executing program 1:

18:17:40 executing program 4:

18:17:40 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, 0x0, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:40 executing program 2:

18:17:40 executing program 1:

18:17:40 executing program 3:

[  469.279749][T29733] binder: BINDER_SET_CONTEXT_MGR already set
[  469.286058][T29733] binder: 29728:29733 ioctl 4018620d 200000c0 returned -16
18:17:40 executing program 4:

18:17:40 executing program 1:

18:17:40 executing program 2:
r0 = socket$kcm(0xa, 0x4000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x28, 0x29, 0x2, "0000000000000000000000000000000004"}], 0x28}, 0x0)

18:17:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a7", 0x69, 0xfffffffffffffffd)

18:17:40 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0xa, 0xc, 0x100000000000914, 0x1}, 0x2c)
gettid()
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000500)='./file1\x00', r0}, 0x10)

18:17:40 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:40 executing program 4:
r0 = socket$kcm(0x10, 0x800000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="2e0000001a008100a00f80ecdb4cb904024865160b000000d4126efb12001d000800da1b40d819a9ffe200000000", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000002000)={0x0, 0x0, 0x0}, 0x0)

18:17:40 executing program 1:

18:17:40 executing program 2:

18:17:40 executing program 3:

18:17:40 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a7", 0x69, 0xfffffffffffffffd)

18:17:40 executing program 1:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
recvmmsg(r0, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0)

[  469.761771][T29762] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  469.762256][T29759] binder: BINDER_SET_CONTEXT_MGR already set
[  469.776332][T29759] binder: 29758:29759 ioctl 4018620d 200000c0 returned -16
18:17:40 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0))

18:17:40 executing program 2:
syz_emit_ethernet(0x6a, &(0x7f0000000100)={@link_local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev, @multicast1, {[@rr={0x44, 0x3}]}}, @gre}}}}, 0x0)

[  469.842118][T29762] netlink: 'syz-executor.4': attribute type 29 has an invalid length.
[  469.842674][T29759] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  469.842689][T29759] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:40 executing program 1:
socket$inet(0x2b, 0x1, 0x0)

18:17:41 executing program 4:
r0 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

18:17:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962", 0x9e, 0xfffffffffffffffd)

18:17:41 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:41 executing program 2:
syz_emit_ethernet(0x296449, &(0x7f0000000500)={@local, @broadcast, [], {@arp={0x4305, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @link_local={0x2}, @broadcast, @link_local={0x2}}}}}, 0x0)

18:17:41 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(r0, r1, 0x0, 0x800000000024)

18:17:41 executing program 3:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0x10000026f)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

18:17:41 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @dev}, 0x19)

18:17:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962", 0x9e, 0xfffffffffffffffd)

18:17:41 executing program 2:
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
socket$key(0xf, 0x3, 0x2)
unshare(0x8020400)

[  470.299601][T29799] binder: BINDER_SET_CONTEXT_MGR already set
[  470.305861][T29799] binder: 29797:29799 ioctl 4018620d 200000c0 returned -16
18:17:41 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff)

[  470.394553][T29799] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:41 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962", 0x9e, 0xfffffffffffffffd)

18:17:41 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$binder(0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xffffffff8a2bf96e, 0x0, 0x0, 0x0, 0x0, 0x800000000000184, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = memfd_create(0x0, 0x0)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
r2 = dup2(r1, r0)
write$P9_RFLUSH(r2, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000340)=0x72, 0x4)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r3, 0x0, 0x5b, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})
setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000080), 0x4)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write(r4, &(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0)

[  470.648674][T29887] binder: BINDER_SET_CONTEXT_MGR already set
[  470.655439][T29887] binder: 29875:29887 ioctl 4018620d 200000c0 returned -16
[  470.690519][T29920] __nla_parse: 14 callbacks suppressed
[  470.690541][T29920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  470.728637][T29920] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  470.744952][T29887] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:41 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:41 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5}}, 0xe8)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0)

18:17:41 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d", 0xb8, 0xfffffffffffffffd)

[  470.976653][T29974] binder: BINDER_SET_CONTEXT_MGR already set
[  470.982984][T29974] binder: 29965:29974 ioctl 4018620d 200000c0 returned -16
[  471.017528][T29974] binder_alloc: 20354: binder_alloc_buf, no vma
[  471.052743][T30017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  471.091466][T30017] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:42 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)

18:17:42 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
sendmmsg(r0, &(0x7f000000a940)=[{{&(0x7f0000000040)=@in6={0xa, 0x4e23, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[{0xc0, 0x108, 0x0, "6e1ee69b562667193f5c7256b5dac46e6b7c479d91724965abb6613ddd4a4cc9ae34f75eeaf71d8b1948b003eccd59f085271a4255e5d9425431d6932373914b4ed47326e45775b194f59fae0c0864c89d3e941d270bfa2a9869f5e6bd705cee2e52454522a20af0e8f5c5007a4d1e58861a6283337103153fc1f31f0056101012c0c0bda3604957d5ab2bddfafdf5b000e13cc05bae3709946648a2b73fd209d3c1c6b49f6f21be6504a97ad00f29"}], 0xc0}}], 0x1, 0x2000c880)

18:17:42 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:42 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

18:17:42 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="11dca500000000ec7be070")
connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0)

18:17:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="000fb8e97ead0ce8c8a30000f7d01eea7999068ae2bf4bad19af8e6702ae60d93b64bf9e2522426f1a34b6300ee5c0eb2cc10e739652339e8af7885d7eda6d68a594c39ef2ed89991430f6149dc0eb2d48e7dfbb1c7b393dc9d50199fe781f06161698abfaf82dc02ab6040300000000000e8827d75a87671185940d315e1f81e04df7235ec7a76d816f68bf51e996bd36e1270d4c643b46185ae0c1f15f1e330e43571f561e312783148a2d2ded573fa1ac52bbd04f1d387ccd47ae9c4025b341b77ea0828289e1c0fa482fc8c748a81c582aede5209098b8ab7399fdc01a84b9d2df2c21079dc660e0f30211393b9ba57c815af23c39c8f352d49b6d4fe5be5a48cad09d6b8166849bbeb51ecf861ae19c9722931ae3fd806b8c2cfac6b14259e2b852582754135704f1f472692329024be00523a1098c30762dfd53fea2d12a9f3c50f1a01ff57d6e5f0150e5b87d0449fabc22dc070000007a298e000000000000000000000000000000000000000000000000006c3fa5147ff19fe0926685fce60a3d686c2e427a592ffec1dc5ca0b07800c923d4c5bb7dfc0cf3a70fa4b9f5dc84d9afdbde5fc543b8fbebc60e6476649c291a673d48c9275ea2395a912d10d2c69688acce59cba87524d8c034656604dcca7d385ec589b2e6bf89626ba8be7e49925b1b3299d4d1c42a5a984bbdfb7c92515ab7a2c8c708b83e1bd0f17049b57cfae1ceb122e73e12adac1df04e0000000000000000000000003d650f73f05fc894249efd42d10e9d43077c799e2945a31a7da423c5d7cc156b3426ce07b7a7e7ec02660aba3026a5a94236ccf68ad2cdb8012b45754fc307d9fa0c6bdb91c367f66785d91daf2dea4f412362217c0416c50c5a6f06d4bee591a3d4e42daecaf72a5e50fb59a454cb411c40cd85e997ca986bed8df0427de14de4f482fc27bd946f16d2cb1c0908475ec4c35b99d1e059fd426a11a5c941fb2b686d444ecbbdbf782f4283c4e454bdb54431d599bbd1b943b2c3ccb556b9802036"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d", 0xb8, 0xfffffffffffffffd)

[  471.285004][T30142] binder: BINDER_SET_CONTEXT_MGR already set
[  471.291153][T30142] binder: 30141:30142 ioctl 4018620d 200000c0 returned -16
18:17:42 executing program 3:
sched_setaffinity(0x0, 0x8, &(0x7f0000000240))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)

18:17:42 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0xffffffffffffffff, 0x32}, 0x0, @in6, 0x0, 0x0, 0x0, 0x5, 0xfffffffffffffffc, 0x5}}, 0xe8)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0)
sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0207000902000000a8a97bbb73ec9100"], 0x10}}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

[  471.358604][T30153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  471.371433][T30158] binder_alloc: 20354: binder_alloc_buf, no vma
[  471.395169][T30153] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:42 executing program 1:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x5)
write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18}, 0xff9c)

18:17:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d", 0xb8, 0xfffffffffffffffd)

18:17:42 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000), 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="0400731aee9dc037c8e4b33db27ed9ab929616e58e850bad77a1454933d646912f4fb250d1e9f5c47068c112614507247f43c3f1e61d1a098ff997418e55356729eaeed379d7bc204e9694f45631a38cd071d1b3a9d6308a04f929561d"], 0x1}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  471.629272][T30171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  471.655404][T30174] binder: BINDER_SET_CONTEXT_MGR already set
[  471.661598][T30174] binder: 30170:30174 ioctl 4018620d 200000c0 returned -16
18:17:42 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x0, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000380)='mountinfo\x00')
readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000002380)=""/4096, 0x1000}], 0x1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
sched_getaffinity(0x0, 0x8, &(0x7f0000000340))
readv(r2, &(0x7f0000000580), 0x3c1)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x8}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000400))
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000540))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00')
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

[  471.688193][T30202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  471.715523][T30174] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:42 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0xc362e63b3f31ba5f}, 0x20}}, 0x0)

18:17:42 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:42 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7", 0xc5, 0xfffffffffffffffd)

18:17:43 executing program 2:
perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0x10000026f)
read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3)

[  471.938227][T30285] binder: BINDER_SET_CONTEXT_MGR already set
[  471.944722][T30285] binder: 30282:30285 ioctl 4018620d 200000c0 returned -16
[  471.994311][T30285] binder_alloc: 20354: binder_alloc_buf, no vma
[  472.012861][T30289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  472.075740][T30295] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
18:17:43 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:43 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)

18:17:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000004640), &(0x7f0000009900)=0x14)

18:17:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7", 0xc5, 0xfffffffffffffffd)

18:17:43 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x36d, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$packet(0x11, 0x2, 0x300)
write$tun(r0, &(0x7f0000000340)={@void, @val, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x7, 0x0, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}}}, 0xff23)

18:17:43 executing program 2:
socket$inet6(0xa, 0x400000000001, 0x0)
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x15)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x31})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r1, 0x0, 0x0)

18:17:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070")
r1 = socket$inet6(0xa, 0x802, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000440)={'erspan0\x00', {0x2, 0x0, @remote}})
socketpair(0x2, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(0x0)

18:17:43 executing program 3:
r0 = semget$private(0x0, 0x20000000102, 0x0)
clock_gettime(0x0, &(0x7f00000000c0))
semtimedop(r0, &(0x7f0000000040)=[{0x1}, {0x0, 0xffff}], 0x2, 0x0)
semop(r0, &(0x7f0000000000)=[{0x0, 0xffffffffffffb6d0}], 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000080)="11dca5055e0bcfec7be070")
clone(0x0, 0x0, 0x0, 0x0, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)

[  472.434036][T30415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  472.441696][T30415] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  472.458662][T30413] binder: BINDER_SET_CONTEXT_MGR already set
[  472.468177][T30413] binder: 30411:30413 ioctl 4018620d 200000c0 returned -16
[  472.491450][T30413] binder_alloc: 20354: binder_alloc_buf, no vma
[  472.518300][T30415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
18:17:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7", 0xc5, 0xfffffffffffffffd)

18:17:43 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  472.572996][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  472.579999][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  472.668900][T30434] binder: BINDER_SET_CONTEXT_MGR already set
[  472.675361][T30434] binder: 30433:30434 ioctl 4018620d 200000c0 returned -16
[  472.689818][T30434] binder_alloc: 20354: binder_alloc_buf, no vma
[  472.712915][T30423] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
18:17:43 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:43 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b11237", 0xcc, 0xfffffffffffffffd)

[  472.785352][T30423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
18:17:43 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00')
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, 0x0)
r1 = socket(0x10, 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x80000002)

18:17:43 executing program 4:
getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xee00])
clone(0x100, &(0x7f0000000040)="2d8e3cda0d4434ba5db3630a86a754de73eb1e11dccf59b5eb55902962ac91c1b26f4a6a46ff537516900d17f13799665f4fa27bddeffe9c", 0x0, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x3, 0x10)

[  472.865709][T30443] binder: BINDER_SET_CONTEXT_MGR already set
[  472.871822][T30443] binder: 30442:30443 ioctl 4018620d 200000c0 returned -16
18:17:44 executing program 3:

[  472.958704][T30443] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:44 executing program 4:

18:17:44 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

[  473.178115][T30465] binder: BINDER_SET_CONTEXT_MGR already set
[  473.185060][T30465] binder: 30464:30465 ioctl 4018620d 200000c0 returned -16
18:17:46 executing program 2:

18:17:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b11237", 0xcc, 0xfffffffffffffffd)

18:17:46 executing program 3:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x79, 0x1a, 0x78, 0x8, 0xb95, 0x772a, 0x55cd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x77, 0x0, 0x0, 0x77, 0x2d, 0x35}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000700)={0x54, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000380)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000009c0)={0x54, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000800)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001140)={0x54, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f00000001c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x54, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000ec0)={0x54, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

18:17:46 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000020000000f00000000000000950000000000000041ba504d957330121ebac177cc19a272575c77460b9200b56ab51fd5ded1fc2db15a0a1961ed3b9b0d1f7dea35f35772216268f5fb67f3ced5dee747cadc1e2a3fd79341674c2e6230382154922351ed26ebae3818e34d9d1e66ff988d51"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)

18:17:46 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00\x00\x80\x00\x00\x80\x00@\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02"]})

18:17:46 executing program 1:

18:17:46 executing program 4:

[  475.446853][T30482] binder: BINDER_SET_CONTEXT_MGR already set
[  475.453172][T30482] binder: 30481:30482 ioctl 4018620d 200000c0 returned -16
18:17:46 executing program 2:

[  475.516201][T30482] binder_alloc_new_buf_locked: 1 callbacks suppressed
[  475.516219][T30482] binder_alloc: 20354: binder_alloc_buf, no vma
18:17:46 executing program 5:
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5b, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rtc0\x00', 0x40000081, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$inet(0x10, 0x3, 0xc)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a1009000200021d8568021baba20400ff7e28000000110affff82aba0aa1c0009b356da5a80918b06b20cd37ed01cc000"/76, 0x4c}], 0x1}, 0x0)
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000340)=0x6)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0)
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setpriority(0x1, 0x0, 0x0)
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x360001, 0x0)
time(&(0x7f00000005c0))
ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/ppp\x00', 0x4000400, 0x0)
accept4$alg(r6, 0x0, 0x0, 0x80800)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000003c0))
ioctl$EVIOCGPROP(r7, 0x40047438, &(0x7f0000000180)=""/246)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r3, &(0x7f00000002c0)={0x2})
fcntl$getownex(r4, 0x10, &(0x7f0000000500))
pread64(r7, &(0x7f0000000580)=""/60, 0x3c, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000540)='/dev/null\x00', 0x200003, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x100000000000000)
add_key(&(0x7f0000000a40)='.request_key_auth\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000880)="2d6c8a3dce72ee52529f7c94b06bf919a3718ef0ecb0d8c75eb1a820769462765e19e461b2d3e495659ca0bc10a5f188eafbe616addd5f6d0495a1bd65518627fcd1f9a37589d0325b28639ee22a360556e3453330c31c3662fdde6c84f8654d065cfec564b8f6c2a74739540c0255d587702236460f098c14d31da692e53945d2f4b42b8c7a1fccd3b923e9084454c112c6c62f7421c8f54dd7d3389962a3a37c845bdfd55c9f58970bcfe6d644379e466b2893106b723d2574d3ce3ed31c8b2295adbae7975a1482b11237", 0xcc, 0xfffffffffffffffd)

18:17:46 executing program 0:
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x9}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001180)=[@in={0x2, 0x0, @local}], 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}], 0x1c)
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xa9, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x40, 0x1410c2)
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
r2 = fcntl$dupfd(r1, 0x406, r1)
syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000300)={@mcast1}, &(0x7f0000000340)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000500)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000540), &(0x7f0000000580)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[]}}, 0x200000d0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
write$FUSE_WRITE(r2, &(0x7f00000001c0)={0x18, 0x0, 0x8, {0x1}}, 0x18)
mmap$binder(&(0x7f00000a0000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r3, 0x8)
close(r1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@flat, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/10, 0xa}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}, 0x10}], 0x5f, 0x0, &(0x7f0000000800)="8e104d30b272619f18a20e7b3c498d87f8278223e252d0a5e1f7f94c4ca85bb566374da15c1679cb1e6b4c4c44b4e3fc7f3768d7534d7aa7b2428f74bab13139531a4cf785ad52877bdd275bcf4e5b24877da3f0d0a71daf5995249a2f59d1"})

18:17:46 executing program 4:

18:17:46 executing program 1:

18:17:46 executing program 2:

[  475.772614][    T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  475.787218][T30500] __nla_parse: 8 callbacks suppressed
[  475.787241][T30500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  475.798141][T30496] binder: BINDER_SET_CONTEXT_MGR already set
[  475.808717][T30496] binder: 30495:30496 ioctl 4018620d 200000c0 returned -16
[  475.833885][T30503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'.
[  475.854150][T30504] binder_alloc: 20354: binder_alloc_buf, no vma
[  476.032574][    T5] usb 4-1: Using ep0 maxpacket: 8
[  476.162833][    T5] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  476.171394][    T5] usb 4-1: config 0 has no interface number 0
[  476.177780][    T5] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=55.cd
[  476.186987][    T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.196448][    T5] usb 4-1: config 0 descriptor??
[  476.432570][    T5] ==================================================================
[  476.441233][    T5] BUG: KMSAN: uninit-value in ax88772_bind+0x93d/0x11e0
[  476.448227][    T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.1.0+ #1
[  476.455181][    T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  476.465237][    T5] Workqueue: usb_hub_wq hub_event
[  476.470276][    T5] Call Trace:
[  476.473573][    T5]  dump_stack+0x191/0x1f0
[  476.477912][    T5]  kmsan_report+0x162/0x2d0
[  476.483261][    T5]  __msan_warning+0x75/0xe0
[  476.489266][    T5]  ax88772_bind+0x93d/0x11e0
[  476.493855][    T5]  ? ax88178_change_mtu+0x650/0x650
[  476.499071][    T5]  usbnet_probe+0x10f5/0x3940
[  476.503784][    T5]  ? usbnet_disconnect+0x660/0x660
[  476.508904][    T5]  usb_probe_interface+0xd66/0x1320
[  476.514133][    T5]  ? usb_register_driver+0x7d0/0x7d0
[  476.519420][    T5]  really_probe+0xdae/0x1d80
[  476.524009][    T5]  driver_probe_device+0x1b3/0x4f0
[  476.529146][    T5]  __device_attach_driver+0x5b8/0x790
[  476.534598][    T5]  bus_for_each_drv+0x28e/0x3b0
[  476.539712][    T5]  ? deferred_probe_work_func+0x400/0x400
[  476.545430][    T5]  __device_attach+0x454/0x730
[  476.550198][    T5]  device_initial_probe+0x4a/0x60
[  476.555227][    T5]  bus_probe_device+0x137/0x390
[  476.560126][    T5]  device_add+0x288d/0x30e0
[  476.564684][    T5]  usb_set_configuration+0x30dc/0x3750
[  476.570479][    T5]  generic_probe+0xe7/0x280
[  476.574979][    T5]  ? usb_choose_configuration+0xae0/0xae0
[  476.581266][    T5]  usb_probe_device+0x14c/0x200
[  476.586824][    T5]  ? usb_register_device_driver+0x470/0x470
[  476.593402][    T5]  really_probe+0xdae/0x1d80
[  476.599578][    T5]  driver_probe_device+0x1b3/0x4f0
[  476.604689][    T5]  __device_attach_driver+0x5b8/0x790
[  476.610085][    T5]  bus_for_each_drv+0x28e/0x3b0
[  476.614946][    T5]  ? deferred_probe_work_func+0x400/0x400
[  476.620673][    T5]  __device_attach+0x454/0x730
[  476.625546][    T5]  device_initial_probe+0x4a/0x60
[  476.630568][    T5]  bus_probe_device+0x137/0x390
[  476.635442][    T5]  device_add+0x288d/0x30e0
[  476.640142][    T5]  usb_new_device+0x23e5/0x2ff0
[  476.645003][    T5]  hub_event+0x48d1/0x7290
[  476.649472][    T5]  ? kmsan_get_shadow_origin_ptr+0x71/0x470
[  476.655359][    T5]  ? led_work+0x720/0x720
[  476.659716][    T5]  ? led_work+0x720/0x720
[  476.664043][    T5]  process_one_work+0x1572/0x1f00
[  476.669285][    T5]  worker_thread+0x111b/0x2460
[  476.674257][    T5]  kthread+0x4b5/0x4f0
[  476.678318][    T5]  ? process_one_work+0x1f00/0x1f00
[  476.683518][    T5]  ? kthread_blkcg+0xf0/0xf0
[  476.688115][    T5]  ret_from_fork+0x35/0x40
[  476.692559][    T5] 
[  476.694886][    T5] Local variable description: ----buf@ax88772_bind
[  476.701371][    T5] Variable was created at:
[  476.705777][    T5]  ax88772_bind+0x5f/0x11e0
[  476.710280][    T5]  usbnet_probe+0x10f5/0x3940
[  476.714967][    T5] ==================================================================
[  476.723340][    T5] Disabling lock debugging due to kernel taint
[  476.729487][    T5] Kernel panic - not syncing: panic_on_warn set ...
[  476.736060][    T5] CPU: 0 PID: 5 Comm: kworker/0:0 Tainted: G    B             5.1.0+ #1
[  476.744401][    T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  476.754468][    T5] Workqueue: usb_hub_wq hub_event
[  476.759481][    T5] Call Trace:
[  476.762769][    T5]  dump_stack+0x191/0x1f0
[  476.767123][    T5]  panic+0x3ca/0xafe
[  476.771052][    T5]  kmsan_report+0x2ca/0x2d0
[  476.777307][    T5]  __msan_warning+0x75/0xe0
[  476.781837][    T5]  ax88772_bind+0x93d/0x11e0
[  476.786447][    T5]  ? ax88178_change_mtu+0x650/0x650
[  476.791661][    T5]  usbnet_probe+0x10f5/0x3940
[  476.796361][    T5]  ? usbnet_disconnect+0x660/0x660
[  476.801601][    T5]  usb_probe_interface+0xd66/0x1320
[  476.806824][    T5]  ? usb_register_driver+0x7d0/0x7d0
[  476.812100][    T5]  really_probe+0xdae/0x1d80
[  476.816690][    T5]  driver_probe_device+0x1b3/0x4f0
[  476.821803][    T5]  __device_attach_driver+0x5b8/0x790
[  476.827204][    T5]  bus_for_each_drv+0x28e/0x3b0
[  476.832055][    T5]  ? deferred_probe_work_func+0x400/0x400
[  476.837768][    T5]  __device_attach+0x454/0x730
[  476.842528][    T5]  device_initial_probe+0x4a/0x60
[  476.847572][    T5]  bus_probe_device+0x137/0x390
[  476.852426][    T5]  device_add+0x288d/0x30e0
[  476.856931][    T5]  usb_set_configuration+0x30dc/0x3750
[  476.862403][    T5]  generic_probe+0xe7/0x280
[  476.873106][    T5]  ? usb_choose_configuration+0xae0/0xae0
[  476.878867][    T5]  usb_probe_device+0x14c/0x200
[  476.883754][    T5]  ? usb_register_device_driver+0x470/0x470
[  476.889660][    T5]  really_probe+0xdae/0x1d80
[  476.899350][    T5]  driver_probe_device+0x1b3/0x4f0
[  476.904470][    T5]  __device_attach_driver+0x5b8/0x790
[  476.909875][    T5]  bus_for_each_drv+0x28e/0x3b0
[  476.914746][    T5]  ? deferred_probe_work_func+0x400/0x400
[  476.920466][    T5]  __device_attach+0x454/0x730
[  476.925261][    T5]  device_initial_probe+0x4a/0x60
[  476.930366][    T5]  bus_probe_device+0x137/0x390
[  476.935268][    T5]  device_add+0x288d/0x30e0
[  476.939816][    T5]  usb_new_device+0x23e5/0x2ff0
[  476.945104][    T5]  hub_event+0x48d1/0x7290
[  476.949547][    T5]  ? kmsan_get_shadow_origin_ptr+0x71/0x470
[  476.956356][    T5]  ? led_work+0x720/0x720
[  476.960681][    T5]  ? led_work+0x720/0x720
[  476.965042][    T5]  process_one_work+0x1572/0x1f00
[  476.970079][    T5]  worker_thread+0x111b/0x2460
[  476.974847][    T5]  kthread+0x4b5/0x4f0
[  476.978907][    T5]  ? process_one_work+0x1f00/0x1f00
[  476.984098][    T5]  ? kthread_blkcg+0xf0/0xf0
[  476.990091][    T5]  ret_from_fork+0x35/0x40
[  476.995830][    T5] Kernel Offset: disabled
[  477.000182][    T5] Rebooting in 86400 seconds..