ned -14
[ 1545.311107] binder: release 30679:30680 transaction 634 out, still active
[ 1545.321056] binder: undelivered TRANSACTION_COMPLETE
[ 1545.352125] binder: undelivered TRANSACTION_ERROR: 29189
[ 1545.357896] binder: send failed reply for transaction 634, target dead
05:51:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:51:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x68}]}})

05:51:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000ff", 0x29}], 0x1)

05:51:57 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={<r2=>0x0})
r3 = mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8c, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x38, 0x40, 0x18, 0x30, 0x30]}}, @acquire={0x40046305, 0x3}, @acquire_done={0x40106309, r2, 0x1}, @free_buffer={0x40086303, r3}, @clear_death={0x400c630f, 0x0, 0x2}, @clear_death={0x400c630f, 0x4, 0x3}], 0xe8, 0x0, &(0x7f00000001c0)="04e64368aa41cd7e8f1e6363fb4429f007cb54a161cfd3786af7d1566ffd9d339a2e6172f7a025558628212bd54ff8bce73c53170b8e168c4284885c954c83d9c389b73d17fad19a91cea2fccad0f459b4a902f38908d7199883773e524a7f66b1d93c9ecc116234515b59bbf7aa0807765fda2ca462a90f61f65a3004bd200c47358a39b0eab86cbf776c1a8084f952f7769e72b15ba621b6810d260eade9b7fafa582764a526d6afca33ac104cd6599238337ce748010fd33e43efb5e8778e25c2b258f97eb26c493ab888a9bc14ca884a30c57d207eacb57517a9abc27eeb4d77db4ee5166e47"})
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x100)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:51:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290124002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x74, 0x0, 0x0})

[ 1545.442124] binder: 30698:30700 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1545.453462] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:51:57 executing program 1:
r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x40003)
write$P9_RLERRORu(r0, &(0x7f0000000180)={0x21, 0x7, 0x1, {{0x14, 'selfkeyring,-selinux'}, 0x3}}, 0x21)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
rt_sigprocmask(0x2, &(0x7f0000000000)={0x1ff}, &(0x7f0000000040), 0x8)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "19e74871b5564cfa611c56298a30dcadf31b701d"}, 0x15, 0x1)

05:51:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1545.514415] binder: 30698:30700 ioctl c0306201 200002c0 returned -14
[ 1545.541739] binder_alloc: binder_alloc_mmap_handler: 30698 20001000-20004000 already mapped failed -16
05:51:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x6c00000000000000}]}})

[ 1545.606176] binder: BINDER_SET_CONTEXT_MGR already set
[ 1545.631021] binder: 30698:30700 ioctl 40046207 0 returned -16
[ 1545.637161] binder: BINDER_SET_CONTEXT_MGR already set
[ 1545.678954] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1545.711099] binder: 30711:30716 ioctl 40046207 0 returned -16
[ 1545.717298] binder_alloc: 30698: binder_alloc_buf, no vma
05:51:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x300}]}})

05:51:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297b01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1545.723016] binder: 30698:30724 transaction failed 29189/-3, size 0-0 line 2973
[ 1545.736069] binder: 30711:30722 ioctl c0306201 0 returned -14
[ 1545.752135] binder: 30711:30722 ioctl c0306201 0 returned -14
[ 1545.759384] binder: 30698:30708 BC_FREE_BUFFER u0000000020001000 no match
[ 1545.783979] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1545.785386] binder: BINDER_SET_CONTEXT_MGR already set
[ 1545.798306] binder: 30698:30708 ioctl c0306201 200002c0 returned -14
[ 1545.821674] binder: release 30698:30700 transaction 637 out, still active
[ 1545.829400] binder: 30711:30722 ioctl 40046207 0 returned -16
[ 1545.836925] binder: undelivered TRANSACTION_COMPLETE
[ 1545.863376] binder: send failed reply for transaction 637, target dead
[ 1545.877800] binder: 30711:30716 ioctl c0306201 0 returned -14
[ 1545.890483] binder: undelivered TRANSACTION_ERROR: 29189
[ 1545.906062] binder: 30711:30734 ioctl c0306201 0 returned -14
05:51:57 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:51:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:51:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296d00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x6c, 0x0, 0x0})

05:51:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x700}]}})

05:51:57 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000000))
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffff0, 0x80000)
ioctl$TIOCSBRK(r1, 0x5427)
r2 = semget$private(0x0, 0x0, 0x100)
semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f0000000080)=""/16)

[ 1546.216410] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1546.238512] binder: 30745:30746 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1546.253874] binder: BINDER_SET_CONTEXT_MGR already set
05:51:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x6c}]}})

05:51:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:51:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901a9002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1546.279654] binder: 30745:30746 ioctl c0306201 200002c0 returned -14
[ 1546.298070] binder: 30743:30747 ioctl 40046207 0 returned -16
[ 1546.317948] binder_alloc: binder_alloc_mmap_handler: 30745 20001000-20004000 already mapped failed -16
[ 1546.362827] binder: BINDER_SET_CONTEXT_MGR already set
[ 1546.370784] binder: 30743:30747 ioctl 227b 20000000 returned -22
[ 1546.394402] binder: 30745:30746 ioctl 40046207 0 returned -16
[ 1546.403819] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1546.454061] binder_alloc: 30745: binder_alloc_buf, no vma
[ 1546.467300] binder: 30745:30765 transaction failed 29189/-3, size 0-0 line 2973
[ 1546.476880] binder: BINDER_SET_CONTEXT_MGR already set
[ 1546.482359] binder: 30743:30753 ioctl 40046207 0 returned -16
[ 1546.495678] binder: 30745:30755 BC_FREE_BUFFER u0000000020001000 no match
05:51:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500007f", 0x29}], 0x1)

05:51:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293402002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x60000000}]}})

[ 1546.502937] binder: 30743:30753 ioctl 227b 20000000 returned -22
[ 1546.530851] binder: 30745:30755 ioctl c0306201 200002c0 returned -14
[ 1546.567192] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1546.600696] binder: release 30745:30746 transaction 640 out, still active
[ 1546.615867] binder: undelivered TRANSACTION_COMPLETE
[ 1546.642606] binder: send failed reply for transaction 640, target dead
[ 1546.671903] binder: undelivered TRANSACTION_ERROR: 29189
05:51:58 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:51:58 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x2a1740d8, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000002680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000002640)={&(0x7f00000002c0)={0x2354, 0xa, 0xf, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x6}, [@generic="b2993341eb8a126043fe1caa8e6530d8c2c34a1be33b2cfe5e470a9ef7726d36cc422ff0ade3b0b777e60ccea5f436a94e5ead4ab71fc40b8afea461ee217fcb6675ab24b3b0845534630d4c16b50477a181f960e6a624374f21f845b66b50d98204d78a234baa", @generic="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", @generic="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", @nested={0x158, 0x81, [@typed={0x4, 0x37}, @typed={0x4, 0x1f}, @generic="9441c269714748b5589b223c058bcc23e39b55f1ecc84b7f06491247b1429d41805a8cac67db1c1e9e84fbda4def6d00e9a7c4ac12b384589ee5a9c4ee5afcf225c94be01ec9335ea61cfeb2d09bfc329b2937ce23e60d9e5a3750fb70bebb14461e08fd15e52a4eeb4a8c23262fd5231f1e90a1573280ba", @typed={0x8, 0x16, @u32}, @generic="8fdbf8a322663c76e69c878cd0f3534c87ed514cb7c5b53850189f2c89e5f529337a6c718f71c11abba3c9ca884aa0a8c9ce68a2f5042d6309937f4a1fb7d6409886bb2ecbbc216b68b95bba04cea719f63560ec5de366da02f29fd6b126d3a8dcd4533f913b9ebd015842096775cdaa64315abeb0c8917e1c67793344327187d139e80bbbbf1500cf742830470aca1532aede82ee10dd7074250b05a7198483655026a57f8a7d65533be399af036c1dac70a08c37f01ab48e330d9e8ad54515fc3e4d040cc19fd963be9f"]}, @generic="151cdd7ddef11f9bcc4bf291099914de18668f938dd1bb5d61bdf8cb2fa37045b394be2c216ed3c6072c93addd3ff9b9339c6c929d7d26c6ddb419127931e17fa62bdaaf8373bc1169a615e64c02621477ea324c0f84ef7384ac10036fcc014f13bac3d3a0b1cd4f03d30c0caf0c8597a973fa88a22b36d1f7974cfc5fe2d5380d267b9c5d492c9c628e3917d99872834b9d77bedf6b4e6f5f9e852000a6cc2148d3e76c4c14f8309ffc02e6353ffe1ef7f345fb24054c11dafb9abf91383f0d254a53c53aaf1c5478b86ee03764e63bcd6b2c9abf1df8f837e474300c2f727d8d54fd7b546b2e9ab9df6629d22412f26f", @generic="4969b3735609712f0f3ae3a7ebc8c9f4360434744b176ea480082cb63acb75789f1bf6ab67f02e8ee7fa85dd29986cd9a6d582fefaa33e5357dc0a4c61d1334328fbbcc33407163b728951ad3d8c3a523c626c81c3cfd9e25d5a4faab205d1f6ad3544570e9b423f1d1a25492116456a9c0bf4ae2e99f32f0b6de2e77962a50e60c3d8", @typed={0xc, 0x30, @str='[bdev#\x00'}]}, 0x2354}, 0x1, 0x0, 0x0, 0x44040}, 0x4000080)
r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x0, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x15f9)
io_setup(0x2, &(0x7f0000000040)=<r4=>0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2)
flock(r0, 0x2)
io_pgetevents(r4, 0x80000001, 0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0xfffffffffffff001}, 0x8})

05:51:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000fe", 0x29}], 0x1)

05:51:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x68}]}})

05:51:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293301002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x4c00, 0x0, 0x0})

[ 1546.962329] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1546.967492] binder: 30786:30787 ioctl c0306201 0 returned -14
[ 1546.985844] binder: BINDER_SET_CONTEXT_MGR already set
[ 1546.991147] binder: 30785:30789 ioctl 40046207 0 returned -16
[ 1546.996031] binder: BINDER_SET_CONTEXT_MGR already set
05:51:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290056002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000fc", 0x29}], 0x1)

[ 1547.010623] binder: 30786:30795 ioctl 40046207 0 returned -16
05:51:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x100000000000000}]}})

[ 1547.059182] binder: 30786:30787 ioctl c0306201 0 returned -14
[ 1547.078901] binder: 30785:30789 BC_FREE_BUFFER u0000000020001000 no match
[ 1547.083687] binder_alloc: 30786: binder_alloc_buf, no vma
05:51:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900a4002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1547.138592] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1547.143290] binder: 30785:30799 transaction failed 29189/-3, size 0-0 line 2973
[ 1547.163739] binder: 30785:30789 ioctl c0306201 200002c0 returned -14
05:51:58 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:51:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xffffff7f00000000}]}})

[ 1547.197957] binder_alloc: binder_alloc_mmap_handler: 30785 20001000-20004000 already mapped failed -16
[ 1547.282402] binder_alloc: 30785: binder_alloc_buf, no vma
[ 1547.295060] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1547.311482] binder: 30785:30819 transaction failed 29189/-3, size 0-0 line 2973
[ 1547.320699] binder: 30785:30799 BC_FREE_BUFFER u0000000020001000 no match
[ 1547.328757] binder: 30785:30799 ioctl c0306201 200002c0 returned -14
[ 1547.335648] binder: undelivered TRANSACTION_ERROR: 29189
[ 1547.370575] binder: undelivered TRANSACTION_ERROR: 29189
05:51:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:51:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ee01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:51:59 executing program 1:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000002a80)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
tee(r2, r1, 0x8, 0x0)
write$P9_RREADDIR(r3, &(0x7f0000000140)=ANY=[], 0x0)
dup2(r2, r3)
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x2, {0x8, 0x3, 0x3}}, 0x14)

05:51:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7000000}]}})

05:51:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x6c00, 0x0, 0x0})

05:51:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1547.472954] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1547.492197] binder: 30832:30837 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:51:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x68000000}]}})

05:51:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295d01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1547.519741] binder: 30832:30837 ioctl c0306201 200002c0 returned -14
05:51:59 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1547.557110] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1547.557181] binder_alloc: binder_alloc_mmap_handler: 30832 20001000-20004000 already mapped failed -16
05:51:59 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1547.603120] binder: BINDER_SET_CONTEXT_MGR already set
05:51:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6c}]}})

[ 1547.626632] binder: 30832:30837 ioctl 40046207 0 returned -16
05:51:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295001002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1547.687598] binder_alloc: 30832: binder_alloc_buf, no vma
[ 1547.720178] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1547.727205] binder: 30832:30846 BC_FREE_BUFFER u0000000020001000 no match
[ 1547.747971] binder: BINDER_SET_CONTEXT_MGR already set
[ 1547.754741] binder: 30832:30846 ioctl c0306201 200002c0 returned -14
[ 1547.774893] binder: 30859:30862 ioctl 40046207 0 returned -16
[ 1547.781599] binder: release 30832:30837 transaction 647 out, still active
[ 1547.802819] binder: undelivered TRANSACTION_COMPLETE
[ 1547.821162] binder: BINDER_SET_CONTEXT_MGR already set
[ 1547.829241] binder: 30859:30865 ioctl 40046207 0 returned -16
[ 1547.831455] binder: send failed reply for transaction 647, target dead
05:52:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7}]}})

05:52:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cc00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x700000000000000, 0x0, 0x0})

05:52:00 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x20000)
ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000040)=0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[ 1548.413562] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.422465] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1548.422549] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.434506] binder: 30879:30886 ioctl 40046207 0 returned -16
[ 1548.440822] binder: 30880:30881 ioctl 40046207 0 returned -16
[ 1548.449424] binder_alloc: 30879: binder_alloc_buf, no vma
05:52:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c702002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1548.471638] binder_transaction: 1 callbacks suppressed
[ 1548.471653] binder: 30880:30881 transaction failed 29189/-3, size 0-0 line 2973
05:52:00 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'erspan0\x00', <r1=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@loopback, @multicast2, r1}, 0xc)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0)
ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000000c0))
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
write$FUSE_GETXATTR(r3, &(0x7f0000000240)={0x18, 0x0, 0x3, {0x7}}, 0x18)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/raw6\x00')
openat$cgroup_int(r4, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0)

05:52:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2}]}})

[ 1548.544415] binder: 30880:30881 ioctl c0306201 200002c0 returned -14
[ 1548.555721] binder_alloc: binder_alloc_mmap_handler: 30880 20001000-20004000 already mapped failed -16
05:52:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290137002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1548.610846] binder: 30880:30881 transaction failed 29189/-22, size 0-0 line 2834
[ 1548.633914] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1548.663310] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.663612] binder_thread_write: 1 callbacks suppressed
[ 1548.663625] binder: 30880:30906 BC_FREE_BUFFER u0000000020001000 no match
05:52:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1548.712108] binder: BINDER_SET_CONTEXT_MGR already set
[ 1548.728612] binder: 30880:30900 ioctl 40046207 0 returned -16
[ 1548.739700] binder_release_work: 1 callbacks suppressed
[ 1548.739707] binder: undelivered TRANSACTION_ERROR: 29189
[ 1548.755347] binder: 30901:30904 ioctl 40046207 0 returned -16
[ 1548.775215] binder: 30880:30906 ioctl c0306201 200002c0 returned -14
[ 1548.897794] binder: undelivered TRANSACTION_ERROR: 29189
05:52:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x48000000}]}})

05:52:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29004b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:00 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0)
ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000040))
mmap$binder(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x22010, r1, 0x0)
ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080))

05:52:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000f0", 0x29}], 0x1)

05:52:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0xffffff7f00000000, 0x0, 0x0})

[ 1549.173593] binder: 30925:30927 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1549.175986] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1549.191908] binder: BINDER_SET_CONTEXT_MGR already set
05:52:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29013d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:00 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1549.214989] binder: 30924:30931 ioctl 40046207 0 returned -16
[ 1549.247640] binder: 30925:30927 ioctl c0306201 200002c0 returned -14
[ 1549.267041] binder: BINDER_SET_CONTEXT_MGR already set
05:52:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x600}]}})

[ 1549.290536] binder_alloc: binder_alloc_mmap_handler: 30925 20001000-20004000 already mapped failed -16
[ 1549.305458] binder: 30924:30936 ioctl 40046207 0 returned -16
[ 1549.322162] binder: BINDER_SET_CONTEXT_MGR already set
05:52:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291801002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1549.353262] binder: 30925:30927 ioctl 40046207 0 returned -16
[ 1549.379158] binder_alloc: 30925: binder_alloc_buf, no vma
[ 1549.389835] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:01 executing program 1:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, {0x6, 0x1, 0x2, 0x200, 0xffffffffffffffb4, 0xdd}, 0x7}, 0xa)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x100000000, 0xfffffffffffffc41, 0x290, 0x9, 0x3, 0x5}, 0x800}, 0xa)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[ 1549.428553] binder: 30925:30939 transaction failed 29189/-3, size 0-0 line 2973
[ 1549.446265] binder: send failed reply for transaction 654 to 30925:30927
05:52:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1549.478050] binder: undelivered TRANSACTION_COMPLETE
[ 1549.494377] binder: 30957:30958 ioctl c0306201 0 returned -14
[ 1549.524500] binder: undelivered TRANSACTION_ERROR: 29189
[ 1549.540408] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.574004] binder: 30957:30963 ioctl c0306201 0 returned -14
[ 1549.597781] binder: 30957:30958 ioctl 40046207 0 returned -16
[ 1549.597796] binder: undelivered TRANSACTION_ERROR: 29189
05:52:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29013a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7400}]}})

05:52:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x2000000, 0x0, 0x0})

05:52:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:01 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x100200, 0x0)
write$vnet(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/200, 0xc8, &(0x7f0000000140)=""/174, 0x1, 0x4}}, 0x68)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1549.911729] binder: 30974:30977 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1549.915336] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.927523] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1549.950940] binder: 30972:30981 ioctl 40046207 0 returned -16
05:52:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901fd002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x48}]}})

[ 1549.951983] binder: 30974:30977 ioctl c0306201 200002c0 returned -14
[ 1549.973350] binder: BINDER_SET_CONTEXT_MGR already set
[ 1549.988767] binder_alloc: binder_alloc_mmap_handler: 30974 20001000-20004000 already mapped failed -16
[ 1549.999554] binder: 30972:30985 ioctl 40046207 0 returned -16
[ 1550.032902] binder: BINDER_SET_CONTEXT_MGR already set
05:52:01 executing program 1:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x100800)
r0 = syz_open_dev$binder(0x0, 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = socket(0x8, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x4, 0x3, 0x1000000000, 0x101, 0x5, 0x2, 0x100000001, 0xff, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x7f, 0x9]}, &(0x7f0000000180)=0x100)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xc0, 0x201, 0x6b6, 0xc60e, r2}, &(0x7f0000000200)=0x10)
r3 = socket$inet_sctp(0x2, 0x8000000005, 0x84)
r4 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x1, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r4, 0x3)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'team0\x00', 0x1000})
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1550.061512] binder: 30974:30977 ioctl 40046207 0 returned -16
[ 1550.099012] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29018d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1550.140990] binder_alloc: 30974: binder_alloc_buf, no vma
[ 1550.174806] binder: 30974:30987 BC_FREE_BUFFER u0000000020001000 no match
[ 1550.176764] binder: 30974:30999 transaction failed 29189/-3, size 0-0 line 2973
[ 1550.181782] binder: 30974:30987 ioctl c0306201 200002c0 returned -14
05:52:01 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1550.243509] device team0 left promiscuous mode
[ 1550.261982] binder: release 30974:30977 transaction 658 out, still active
[ 1550.273863] binder: undelivered TRANSACTION_COMPLETE
[ 1550.296445] binder: send failed reply for transaction 658, target dead
[ 1550.315474] device team_slave_0 left promiscuous mode
[ 1550.341933] device team_slave_1 left promiscuous mode
[ 1550.384918] binder: BINDER_SET_CONTEXT_MGR already set
[ 1550.390236] binder: 31003:31011 ioctl 40046207 0 returned -16
[ 1550.397774] binder: undelivered TRANSACTION_ERROR: 29189
05:52:02 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:02 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000000000039f4ffffffffffff0600000000000000", @ANYRES32=r0, @ANYBLOB="00000000ab0000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="0000001a6000010000000000000000000000000000000000000000007e6983cc1686a65a863834b6cbf45db245bcfaf98c47824d3ebf0f7c3c26bdcac5dc3fcccb19bb78ddc29ac3ae4bf7a0acf2d04f3f33aea2214c4dd3a3ef323a5cf866ad7720db8cb6783291cac4c163bfd4c2434020179df8a9d4caa8b3ad6922a138", @ANYRES32=r0, @ANYBLOB="00000000bef8ffffffffffff00000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="00000000ff7f00000000000000000000000000000000000000000000"])
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$P9_RFLUSH(r2, &(0x7f0000000040)={0x7, 0x6d, 0x1}, 0x7)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

05:52:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b300002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x60}]}})

05:52:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x500, 0x0, 0x0})

05:52:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1550.646305] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1550.655788] binder: BINDER_SET_CONTEXT_MGR already set
[ 1550.655884] binder: 31021:31022 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1550.661089] binder: 31025:31028 ioctl 40046207 0 returned -16
[ 1550.670300] binder: 31025:31028 ioctl c0306201 0 returned -14
05:52:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901b4002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x500000000000000}]}})

[ 1550.713071] binder: BINDER_SET_CONTEXT_MGR already set
[ 1550.725613] binder: 31021:31022 ioctl c0306201 200002c0 returned -14
[ 1550.763141] binder: 31025:31032 ioctl 40046207 0 returned -16
[ 1550.782509] binder_alloc: binder_alloc_mmap_handler: 31021 20001000-20004000 already mapped failed -16
[ 1550.819748] binder: 31025:31036 ioctl c0306201 0 returned -14
[ 1550.839516] binder: BINDER_SET_CONTEXT_MGR already set
[ 1550.851357] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:02 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000008", 0x29}], 0x1)

05:52:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29027e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1550.878142] binder: 31021:31022 ioctl 40046207 0 returned -16
[ 1550.878876] binder_alloc: 31021: binder_alloc_buf, no vma
[ 1550.918133] binder: 31021:31045 transaction failed 29189/-3, size 0-0 line 2973
05:52:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4c}]}})

[ 1550.985441] binder: release 31021:31022 transaction 662 out, still active
[ 1550.988308] binder: 31021:31048 BC_FREE_BUFFER u0000000020001000 no match
[ 1550.995187] binder: undelivered TRANSACTION_COMPLETE
[ 1551.016769] binder: send failed reply for transaction 662, target dead
[ 1551.045282] binder: 31021:31048 ioctl c0306201 200002c0 returned -14
[ 1551.121143] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1551.124893] binder: undelivered TRANSACTION_ERROR: 29189
05:52:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2000000000000000}]}})

05:52:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29011d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:03 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x1, "baf8d82d4ee1be9a"})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)}, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x4, 0x0, 0x0})

05:52:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1551.362510] binder: 31068:31069 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1551.375282] binder: 31068:31069 ioctl c0306201 200002c0 returned -14
[ 1551.382043] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.383516] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1551.404355] binder: 31070:31072 ioctl 40046207 0 returned -16
05:52:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290267002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xfecaedfe}]}})

05:52:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1551.433163] binder_alloc: binder_alloc_mmap_handler: 31068 20001000-20004000 already mapped failed -16
[ 1551.446604] binder: 31070:31072 ioctl 800c6613 200000c0 returned -22
[ 1551.476585] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.507752] binder: 31068:31069 ioctl 40046207 0 returned -16
[ 1551.507915] binder: BINDER_SET_CONTEXT_MGR already set
[ 1551.530466] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1551.553556] binder: 31068:31092 BC_FREE_BUFFER u0000000020001000 no match
[ 1551.565609] binder: 31070:31078 ioctl 40046207 0 returned -16
[ 1551.586272] binder_alloc: 31068: binder_alloc_buf, no vma
[ 1551.595569] binder: 31070:31072 ioctl 800c6613 200000c0 returned -22
05:52:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xffffff7f}]}})

05:52:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290164002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1551.600630] binder: send failed reply for transaction 665 to 31068:31069
[ 1551.610118] binder: 31068:31079 transaction failed 29189/-3, size 0-0 line 2973
[ 1551.640673] binder: 31068:31092 ioctl c0306201 200002c0 returned -14
05:52:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000f0", 0x29}], 0x1)

[ 1551.665499] binder: undelivered TRANSACTION_ERROR: 29189
[ 1551.702845] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1551.779794] binder: undelivered TRANSACTION_COMPLETE
[ 1551.785080] binder: undelivered TRANSACTION_ERROR: 29189
05:52:03 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:03 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x204000, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r1)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000002004e22ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000002004e21ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f0000010000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22ac14142100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x410)

05:52:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290271002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x400000000000000, 0x0, 0x0})

05:52:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3f000000}]}})

05:52:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1552.098448] binder: BINDER_SET_CONTEXT_MGR already set
[ 1552.104466] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1552.116599] binder: 31111:31123 ioctl 40046207 0 returned -16
[ 1552.120590] binder: BINDER_SET_CONTEXT_MGR already set
[ 1552.132344] binder: 31114:31116 ioctl 40046207 0 returned -16
05:52:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298802002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1552.152616] binder_alloc: 31111: binder_alloc_buf, no vma
[ 1552.161376] binder: 31114:31116 transaction failed 29189/-3, size 0-0 line 2973
[ 1552.172301] binder: 31114:31116 BC_FREE_BUFFER u0000000020001000 no match
[ 1552.179810] binder: 31114:31116 ioctl c0306201 200002c0 returned -14
[ 1552.189523] binder_alloc: binder_alloc_mmap_handler: 31114 20001000-20004000 already mapped failed -16
05:52:03 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000011", 0x29}], 0x1)

05:52:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6000}]}})

[ 1552.201918] binder_alloc: 31114: binder_alloc_buf, no vma
[ 1552.239031] binder: 31114:31127 transaction failed 29189/-3, size 0-0 line 2973
[ 1552.246035] print_req_error: I/O error, dev loop0, sector 0
[ 1552.252801] buffer_io_error: 22 callbacks suppressed
[ 1552.252862] Buffer I/O error on dev loop0, logical block 0, lost async page write
[ 1552.255564] print_req_error: I/O error, dev loop0, sector 24
[ 1552.258452] Buffer I/O error on dev loop0, logical block 1, lost async page write
[ 1552.265766] Buffer I/O error on dev loop0, logical block 6, lost async page write
05:52:04 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4bfc, 0x420000)
write$P9_RWALK(r1, &(0x7f0000000040)={0x16, 0x6f, 0x205, {0x1, [{0x180, 0x4, 0x2}]}}, 0x16)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1552.265790] Buffer I/O error on dev loop0, logical block 7, lost async page write
[ 1552.265821] Buffer I/O error on dev loop0, logical block 8, lost async page write
[ 1552.273241] Buffer I/O error on dev loop0, logical block 2, lost async page write
[ 1552.280067] Buffer I/O error on dev loop0, logical block 9, lost async page write
[ 1552.287272] Buffer I/O error on dev loop0, logical block 3, lost async page write
[ 1552.295051] Buffer I/O error on dev loop0, logical block 10, lost async page write
05:52:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3}]}})

[ 1552.302803] Buffer I/O error on dev loop0, logical block 4, lost async page write
[ 1552.342736] binder: 31114:31127 BC_FREE_BUFFER u0000000020001000 no match
[ 1552.370829] binder: 31114:31127 ioctl c0306201 200002c0 returned -14
[ 1552.379256] binder: BINDER_SET_CONTEXT_MGR already set
05:52:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000009", 0x29}], 0x1)

[ 1552.391087] binder: undelivered TRANSACTION_ERROR: 29189
[ 1552.397240] binder: 31138:31139 ioctl 40046207 0 returned -16
[ 1552.430892] binder: undelivered TRANSACTION_ERROR: 29189
[ 1552.442047] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:04 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="292902002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:04 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x6800000000000000, 0x0, 0x0})

05:52:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:04 executing program 1:
syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x400)
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
socket$key(0xf, 0x3, 0x2)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x5)

05:52:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7a}]}})

[ 1552.658319] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1552.676342] binder: BINDER_SET_CONTEXT_MGR already set
05:52:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a202002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6800000000000000}]}})

[ 1552.705174] binder: BINDER_SET_CONTEXT_MGR already set
[ 1552.711356] binder: 31157:31165 ioctl 40046207 0 returned -16
[ 1552.725664] binder: 31158:31167 ioctl 40046207 0 returned -16
[ 1552.737782] binder_alloc: 31157: binder_alloc_buf, no vma
[ 1552.786583] binder: 31158:31172 transaction failed 29189/-3, size 0-0 line 2973
[ 1552.789566] binder: 31158:31167 BC_FREE_BUFFER u0000000020001000 no match
[ 1552.840549] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:04 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:04 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = semget(0x3, 0x0, 0x200)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000002c0)=""/103)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x101080, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={<r3=>0x0, 0xdd, "81171d3b561ee2edccd77d6e02c2427192ff7f2591e56a8f875242c688d8b45d049300484b14e1f931ca2657e69ba2e3c517acb54864e7e308513521b7458e2720ee427b0ed9593869d693311187daf8b5fccb2afdef1761aa08a4b58152018aabef7547b84bc50576b925defdb069454c79b49bfa0df532f726e243d003b8a7acc38b95e8f46aaf0d504530c9fb81e3b831877c2e5d33c0a4c19b69737ccbab9f9d07804074e584d2056141ef72142d70b3c9b094b0c224b13c4b0960854e9e4b8c614055ca4963ac6f9d81e7ddb66af3a589aa1208d6dea0aa31daab"}, &(0x7f0000000140)=0xe5)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000340)={"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"})
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0xba, "a17fdebbfa11bb010f93c930c58b1006bf6548fb913182d857ea3fffbc028b400dde0c2ab6ad41342b7f9e1b3cf5120acff8dcd6c4e05debf4287d0d9a21cf1d57da464b3e8e36cf586cee7163a93821da3ebe7d17f2c1993b8ed8b2a188a05189e5e6337ba7fdd94d496857e9e607b152bcd33a198425be08657322e7af3d28a41d244c2b33f3029c6ff8149ec4fb464b1ce3ff57bdbe980a97f33f2367af2fd28bff299c6bf974fc918b8a0bbd7dd2503f86c83210b149e71e"}, &(0x7f0000000280)=0xc2)

05:52:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b600002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1552.892291] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1552.971061] binder: 31158:31167 ioctl c0306201 200002c0 returned -14
[ 1553.022411] binder_alloc: binder_alloc_mmap_handler: 31158 20001000-20004000 already mapped failed -16
[ 1553.043292] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.065401] binder: 31190:31195 ioctl 40046207 0 returned -16
[ 1553.077653] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.087061] binder: 31158:31167 ioctl 40046207 0 returned -16
[ 1553.104887] binder: 31158:31197 transaction failed 29189/-22, size 0-0 line 2834
[ 1553.113063] binder: 31158:31172 BC_FREE_BUFFER u0000000020001000 no match
[ 1553.143439] binder: 31158:31172 ioctl c0306201 200002c0 returned -14
05:52:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x6000000, 0x0, 0x0})

05:52:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7400000000000000}]}})

05:52:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a900002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:05 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1553.398596] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.404373] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1553.417204] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.428059] binder: 31208:31213 ioctl 40046207 0 returned -16
05:52:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290243002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1553.443397] binder: 31204:31205 ioctl 40046207 0 returned -16
[ 1553.479516] binder_alloc: 31208: binder_alloc_buf, no vma
05:52:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6000000000000000}]}})

05:52:05 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = geteuid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000180)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8)
lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = getegid()
r7 = getegid()
r8 = getgid()
getresgid(&(0x7f0000000480)=<r9=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$VIDIOC_ENUM_FRAMESIZES(r11, 0xc02c564a, &(0x7f0000000780)={0x8, 0x34363248, 0x1, @stepwise={0x6, 0x81, 0x2, 0x7, 0x100000001, 0xc29}})
r12 = syz_open_dev$vcsn(&(0x7f0000000680)='/dev/vcs#\x00', 0xa, 0x4002)
getsockname$packet(r12, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000700)=0x14)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x6}, [{0x2, 0x2, r1}, {0x2, 0x2, r2}, {0x2, 0x7, r3}, {0x2, 0x1, r4}], {0x4, 0x4}, [{0x8, 0x4, r5}, {0x8, 0x4, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x2, r10}], {0x10, 0x4}, {0x20, 0x4}}, 0x74, 0x3)

[ 1553.521965] binder: 31204:31205 BC_FREE_BUFFER u0000000020001000 no match
[ 1553.535771] binder: 31204:31221 transaction failed 29189/-3, size 0-0 line 2973
05:52:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000005", 0x29}], 0x1)

05:52:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="292100002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1553.623341] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1553.658992] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.665628] binder: 31204:31205 ioctl c0306201 200002c0 returned -14
[ 1553.678876] binder_alloc: binder_alloc_mmap_handler: 31204 20001000-20004000 already mapped failed -16
[ 1553.700964] binder: 31233:31236 ioctl 40046207 0 returned -16
[ 1553.720829] binder: BINDER_SET_CONTEXT_MGR already set
[ 1553.740125] binder: 31204:31221 transaction failed 29189/-22, size 0-0 line 2834
[ 1553.768753] binder: 31204:31205 ioctl 40046207 0 returned -16
[ 1553.773298] binder: 31204:31244 BC_FREE_BUFFER u0000000020001000 no match
[ 1553.815962] binder_release_work: 2 callbacks suppressed
[ 1553.815970] binder: undelivered TRANSACTION_ERROR: 29189
[ 1553.861869] binder: 31204:31244 ioctl c0306201 200002c0 returned -14
[ 1553.920216] binder: undelivered TRANSACTION_ERROR: 29189
05:52:05 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2000000}]}})

05:52:05 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:05 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x81)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r4=>0x0}, &(0x7f00000001c0)=0xc)
write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x2, {0x305e, {0x0, 0x2, 0x1}, 0x180, r3, r4, 0x5, 0xbf, 0x5, 0x2, 0xf80, 0x1, 0x400, 0x80000001, 0x6, 0x7261, 0x2, 0x100, 0x2, 0x80000000, 0xfb6}}, 0xa0)

05:52:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291201002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:05 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x300000000000000, 0x0, 0x0})

[ 1554.133867] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.141036] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.154532] binder: 31255:31256 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1554.166355] binder: 31251:31257 ioctl 40046207 0 returned -16
05:52:05 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x500}]}})

05:52:05 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29fb00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1554.182319] binder: 31251:31257 ioctl c0306201 0 returned -14
[ 1554.192741] binder: 31255:31256 ioctl c0306201 200002c0 returned -14
[ 1554.209333] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.217106] binder_alloc: binder_alloc_mmap_handler: 31255 20001000-20004000 already mapped failed -16
05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1554.245210] binder: 31251:31265 ioctl 40046207 0 returned -16
[ 1554.254175] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.263427] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.283512] binder: 31255:31256 ioctl 40046207 0 returned -16
[ 1554.318458] binder: 31251:31265 ioctl c0306201 0 returned -14
[ 1554.320991] binder_alloc: 31255: binder_alloc_buf, no vma
[ 1554.325341] binder: 31255:31279 BC_FREE_BUFFER u0000000020001000 no match
05:52:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6c00}]}})

05:52:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x1, 0x200000)
ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x1, 0x101, {0x4, 0x40, 0x300d, 0x7, 0x0, 0x2, 0x1, 0x4}})

05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1554.398770] binder: release 31255:31256 transaction 681 out, still active
[ 1554.409539] binder: 31255:31279 ioctl c0306201 200002c0 returned -14
[ 1554.416176] binder: undelivered TRANSACTION_COMPLETE
05:52:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ab01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1554.445805] binder: send failed reply for transaction 681, target dead
[ 1554.450579] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.459162] binder: 31255:31266 transaction failed 29189/-3, size 0-0 line 2973
05:52:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x5}]}})

05:52:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x4c00000000000000, 0x0, 0x0})

[ 1554.579742] binder: undelivered TRANSACTION_ERROR: 29189
05:52:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900a5002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1554.622590] binder: 31294:31295 ioctl c0306201 0 returned -14
[ 1554.657328] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.670153] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.673674] binder: 31294:31303 ioctl 40046207 0 returned -16
[ 1554.682311] binder: BINDER_SET_CONTEXT_MGR already set
[ 1554.688411] binder: 31300:31304 ioctl 40046207 0 returned -16
[ 1554.702797] binder: 31294:31295 ioctl c0306201 0 returned -14
05:52:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x600000000000000}]}})

[ 1554.721955] binder_alloc: 31294: binder_alloc_buf, no vma
05:52:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1554.760393] binder: 31300:31309 transaction failed 29189/-3, size 0-0 line 2973
[ 1554.785671] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.803783] binder: 31300:31304 BC_FREE_BUFFER u0000000020001000 no match
05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:06 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r0)
getsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
socket$nl_route(0x10, 0x3, 0x0)

05:52:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x60000000}]}})

05:52:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290047002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1554.852880] binder: 31300:31304 ioctl c0306201 200002c0 returned -14
[ 1554.889809] binder_alloc: binder_alloc_mmap_handler: 31300 20001000-20004000 already mapped failed -16
05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1554.972296] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1554.979458] binder_alloc: 31300: binder_alloc_buf, no vma
[ 1555.002879] binder: 31300:31304 transaction failed 29189/-3, size 0-0 line 2973
05:52:06 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291601002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:06 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x20000000})

[ 1555.023758] binder: 31300:31309 BC_FREE_BUFFER u0000000020001000 no match
[ 1555.033539] binder: 31300:31309 ioctl c0306201 200002c0 returned -14
[ 1555.048465] binder: undelivered TRANSACTION_ERROR: 29189
05:52:06 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x7000000, 0x0, 0x0})

05:52:06 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:06 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7a00}]}})

[ 1555.082569] binder: undelivered TRANSACTION_ERROR: 29189
[ 1555.136548] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1555.174203] binder: BINDER_SET_CONTEXT_MGR already set
05:52:06 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1555.214834] binder: 31344:31350 ioctl 40046207 0 returned -16
[ 1555.220935] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.250690] binder: 31351:31353 ioctl 40046207 0 returned -16
05:52:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294e02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1555.273527] binder_alloc: 31344: binder_alloc_buf, no vma
[ 1555.285194] binder: 31351:31356 transaction failed 29189/-3, size 0-0 line 2973
05:52:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x2000}]}})

05:52:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:07 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000040)={<r2=>0x0, 0x1}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={r2, 0x7}, 0x8)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1555.317724] binder: 31351:31353 BC_FREE_BUFFER u0000000020001000 no match
[ 1555.329317] binder: 31351:31353 ioctl c0306201 200002c0 returned -14
[ 1555.385016] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1555.397279] binder_alloc: binder_alloc_mmap_handler: 31351 20001000-20004000 already mapped failed -16
05:52:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000fd", 0x29}], 0x1)

[ 1555.456777] binder: BINDER_SET_CONTEXT_MGR already set
05:52:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}]}})

05:52:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f801002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1555.484944] binder: 31371:31372 ioctl 40046207 0 returned -16
[ 1555.495061] binder_alloc: 31371: binder_alloc_buf, no vma
[ 1555.512404] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.570203] binder: 31351:31356 BC_FREE_BUFFER u0000000020001000 no match
05:52:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1555.617219] binder: 31351:31376 ioctl 40046207 0 returned -16
[ 1555.618950] binder: undelivered TRANSACTION_ERROR: 29189
[ 1555.640643] binder: 31351:31377 transaction failed 29189/-3, size 0-0 line 2973
[ 1555.651520] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1555.675556] binder: 31351:31356 ioctl c0306201 200002c0 returned -14
05:52:07 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x4800, 0x0, 0x0})

05:52:07 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f800000000000, 0x40000)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ea00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x700000000000000}]}})

05:52:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1555.783842] binder: undelivered TRANSACTION_ERROR: 29189
05:52:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294500002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1555.832804] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1555.892029] binder: 31401:31402 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1555.916115] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.951149] binder: 31395:31404 ioctl 40046207 0 returned -16
[ 1555.965562] binder: 31401:31402 ioctl c0306201 200002c0 returned -14
[ 1555.980880] binder: BINDER_SET_CONTEXT_MGR already set
[ 1555.991687] binder_alloc: binder_alloc_mmap_handler: 31401 20001000-20004000 already mapped failed -16
[ 1556.017034] binder: 31395:31409 ioctl 40046207 0 returned -16
[ 1556.023094] binder: BINDER_SET_CONTEXT_MGR already set
[ 1556.029184] binder: 31401:31402 ioctl 40046207 0 returned -16
[ 1556.040057] binder_alloc: 31401: binder_alloc_buf, no vma
[ 1556.064370] binder: 31401:31410 transaction failed 29189/-3, size 0-0 line 2973
[ 1556.098838] binder: 31401:31414 BC_FREE_BUFFER u0000000020001000 no match
[ 1556.116546] binder: 31401:31414 ioctl c0306201 200002c0 returned -14
[ 1556.132419] binder: release 31401:31402 transaction 692 out, still active
[ 1556.141862] binder: undelivered TRANSACTION_COMPLETE
[ 1556.159164] binder: send failed reply for transaction 692, target dead
[ 1556.196609] binder: undelivered TRANSACTION_ERROR: 29189
05:52:07 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:07 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:07 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6000000}]}})

05:52:07 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293102002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:07 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x7, 0x0, 0x0})

[ 1556.301883] binder: BINDER_SET_CONTEXT_MGR already set
[ 1556.307969] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1556.310794] binder: 31426:31428 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1556.324791] binder: 31423:31425 ioctl 40046207 0 returned -16
05:52:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29009e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x74}]}})

05:52:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1556.387920] binder: 31426:31428 ioctl c0306201 200002c0 returned -14
05:52:08 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="d647050d3de443895191b55d422d2c49b17e9715dc7a1b30d0f45f0beb897187", 0x20, 0xfffffffffffffffb)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = inotify_init()
r2 = syz_open_dev$vbi(&(0x7f0000001440)='/dev/vbi#\x00', 0x2, 0x2)
write$P9_RREAD(r2, &(0x7f0000001480)={0xed, 0x75, 0x2, {0xe2, "0461cc96aa8be5d1963d4aa16096291307cd8f80bf6309a924082fe0181faf66098e19cf868d026da1d971f3c0fe82840cb26e41e75b6317c13d826e80f1d269010fd9a179fee1012ed2f5a9bccbd41891bf6ab384e3f37d570911628e5886399d6fa87004470ebdb1c2e14b04a661ee5b365873fa5a21549d2984860e80a0afb98122b18c72994729e54c19b24a731a327137aa005f04f8293f8f705940cd1dd2c1acb0851524796406b31bfffe7b4039ba803dc0ab6f231bf5fd48afc21045dbeb1d3c53a8bd7ac1e441ccc48f3c5fa13df3060714a20ae320de2d9409e1ed442a"}}, 0xed)
getsockopt$inet_mreq(r1, 0x0, 0x0, &(0x7f0000000180)={@rand_addr, @multicast2}, &(0x7f0000001400)=0x8)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=<r3=>0x0)
process_vm_writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/132, 0x84}], 0x3, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/230, 0xe6}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'sit0\x00', <r4=>0x0})
connect$packet(r1, &(0x7f0000001600)={0x11, 0xff, r4, 0x1, 0x100000000, 0x6, @remote}, 0x14)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1556.432861] binder_alloc: binder_alloc_mmap_handler: 31426 20001000-20004000 already mapped failed -16
[ 1556.461101] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1556.472828] binder: BINDER_SET_CONTEXT_MGR already set
05:52:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7a00000000000000}]}})

05:52:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1556.508814] binder: 31426:31428 ioctl 40046207 0 returned -16
[ 1556.515450] binder: BINDER_SET_CONTEXT_MGR already set
[ 1556.553295] binder: 31443:31444 ioctl 40046207 0 returned -16
[ 1556.558043] binder_alloc: 31426: binder_alloc_buf, no vma
[ 1556.593324] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1556.610431] binder: 31426:31438 BC_FREE_BUFFER u0000000020001000 no match
[ 1556.621146] binder: BINDER_SET_CONTEXT_MGR already set
[ 1556.637873] binder: 31443:31444 ioctl 40046207 0 returned -16
[ 1556.652932] binder: 31426:31449 transaction failed 29189/-3, size 0-0 line 2973
[ 1556.672510] binder: 31426:31438 ioctl c0306201 200002c0 returned -14
[ 1556.691185] binder: release 31426:31428 transaction 696 out, still active
[ 1556.701976] binder: undelivered TRANSACTION_COMPLETE
[ 1556.717154] binder: send failed reply for transaction 696, target dead
[ 1556.744649] binder: undelivered TRANSACTION_ERROR: 29189
05:52:08 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

05:52:08 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x28000)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040), 0x4)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0))
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa)
bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:08 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290013002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:08 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:08 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xfeedcafe}]}})

05:52:08 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x68, 0x0, 0x0})

[ 1557.276198] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1557.299819] binder: 31470:31471 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901f3002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0xfecaedfe00000000}]}})

05:52:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000002", 0x29}], 0x1)

[ 1557.333396] binder: 31470:31471 ioctl c0306201 200002c0 returned -14
[ 1557.357524] binder_alloc: binder_alloc_mmap_handler: 31470 20001000-20004000 already mapped failed -16
[ 1557.453080] binder: BINDER_SET_CONTEXT_MGR already set
[ 1557.469298] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1557.476731] binder: 31470:31471 ioctl 40046207 0 returned -16
[ 1557.492909] binder_alloc: 31470: binder_alloc_buf, no vma
05:52:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29013e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3f00000000000000}]}})

05:52:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1557.520465] binder: 31470:31492 transaction failed 29189/-3, size 0-0 line 2973
[ 1557.544858] binder: 31470:31479 BC_FREE_BUFFER u0000000020001000 no match
[ 1557.589960] binder: release 31470:31471 transaction 699 out, still active
[ 1557.603722] binder: 31470:31479 ioctl c0306201 200002c0 returned -14
[ 1557.611487] binder: undelivered TRANSACTION_COMPLETE
[ 1557.640879] binder: send failed reply for transaction 699, target dead
[ 1557.652423] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1557.668201] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1557.693128] binder: undelivered TRANSACTION_ERROR: 29189
05:52:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

05:52:09 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290242002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:09 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6c000000}]}})

05:52:09 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x4c, 0x0, 0x0})

05:52:09 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000ff", 0x29}], 0x1)

05:52:09 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1558.199734] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1558.223212] binder: 31517:31519 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1558.237874] binder: BINDER_SET_CONTEXT_MGR already set
05:52:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294002002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x7a000000}]}})

05:52:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1558.263342] binder: 31518:31520 ioctl 40046207 0 returned -16
[ 1558.276687] binder: 31517:31519 ioctl c0306201 200002c0 returned -14
[ 1558.301327] binder: 31518:31526 ioctl c0306201 0 returned -14
[ 1558.318493] binder_alloc: binder_alloc_mmap_handler: 31517 20001000-20004000 already mapped failed -16
[ 1558.362834] binder: BINDER_SET_CONTEXT_MGR already set
[ 1558.384129] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1558.393224] binder: 31518:31526 ioctl 40046207 0 returned -16
[ 1558.399301] binder: BINDER_SET_CONTEXT_MGR already set
[ 1558.406427] binder: 31518:31520 ioctl c0306201 0 returned -14
[ 1558.436069] binder: 31517:31519 ioctl 40046207 0 returned -16
[ 1558.436591] binder_alloc: 31517: binder_alloc_buf, no vma
[ 1558.442897] binder: 31517:31540 BC_FREE_BUFFER u0000000020001000 no match
[ 1558.465688] binder: 31517:31540 ioctl c0306201 200002c0 returned -14
[ 1558.472920] binder: release 31517:31519 transaction 702 out, still active
[ 1558.481022] binder: undelivered TRANSACTION_COMPLETE
05:52:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x700}]}})

05:52:10 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500000b", 0x29}], 0x1)

[ 1558.489569] binder: send failed reply for transaction 702, target dead
[ 1558.581869] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1558.617367] binder: BINDER_SET_CONTEXT_MGR already set
[ 1558.631683] binder: 31545:31553 ioctl 40046207 0 returned -16
05:52:10 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

05:52:10 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x48, 0x0, 0x0})

05:52:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297202002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4c00000000000000}]}})

05:52:10 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1559.044523] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1559.066856] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.085721] binder: BINDER_SET_CONTEXT_MGR already set
05:52:10 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1559.091319] binder: 31565:31573 ioctl 40046207 0 returned -16
[ 1559.108017] binder: 31566:31570 ioctl 40046207 0 returned -16
05:52:10 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x5000000}]}})

05:52:10 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="292102002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1559.166561] binder: 31566:31580 BC_FREE_BUFFER u0000000020001000 no match
[ 1559.173554] binder: 31566:31580 ioctl c0306201 200002c0 returned -14
05:52:10 executing program 1:
syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={<r2=>0x0}, &(0x7f0000000340)=0x8)
arch_prctl$ARCH_SET_GS(0x1001, 0x8)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="7f000000e9b299f540619d642dd7003be3d4475f2853054a1f7e9704708c6739e5c721f9985b401eec1b6ddce6a01d179ef63ed3fd3939c36770cc48e4c65311a89e4108356d7b08306fb52201ce138aca2b7d81f1accec6f406111b2bd64b72a9b97c96a48f43bc4b721380d7a7f7d10bc1575a42cf9a78796b889212f22aac713b77"], &(0x7f0000000440)=0x87)
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0xda0c0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e25, 0x0, @remote, 0x10000}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x10000}, 0x2, [0x3, 0x5, 0x40, 0x9, 0x9, 0x6, 0x2, 0x3]}, 0x2ac)
socket$netlink(0x10, 0x3, 0x5)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000100)={<r4=>0x0, 0x56, "8dc22bdc0c2811dcdac4bc581082a0036f36ee64b028fa95e9b7a0be33f9fce6c148bf49d33ddad1e99e1f8b9c7249ccb9e0680e894aab8cdc633ce6a511645001bb0b43e989bcc97065bb188067f1f8375c0ef96c5f"}, &(0x7f0000000180)=0x5e)
write$P9_RFSYNC(r3, &(0x7f0000000480)={0x7, 0x33, 0x2}, 0x7)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000004c0)={@empty, @loopback, 0x1, 0x5, [@rand_addr=0x9, @multicast1, @empty, @multicast1, @multicast1]}, 0x24)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e23, 0x2, @remote}}}, &(0x7f0000000280)=0x84)
ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x5)

[ 1559.208019] binder_transaction: 1 callbacks suppressed
[ 1559.208037] binder: 31566:31576 transaction failed 29189/-22, size 0-0 line 2834
[ 1559.270204] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500004e", 0x29}], 0x1)

[ 1559.324524] binder_alloc: binder_alloc_mmap_handler: 31566 20001000-20004000 already mapped failed -16
05:52:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290189002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1559.386766] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.408955] binder: 31591:31595 ioctl 40046207 0 returned -16
[ 1559.429684] binder: 31566:31576 transaction failed 29189/-22, size 0-0 line 2834
[ 1559.501919] binder: 31566:31604 BC_FREE_BUFFER u0000000020001000 no match
[ 1559.561700] binder_release_work: 1 callbacks suppressed
[ 1559.561710] binder: undelivered TRANSACTION_ERROR: 29189
[ 1559.575419] binder: 31566:31604 ioctl c0306201 200002c0 returned -14
[ 1559.634476] binder: undelivered TRANSACTION_ERROR: 29189
05:52:11 executing program 1:
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x42000, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x4, 0x4)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
getpid()
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200042, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000100)={0xd76b, 0x1, 0x2})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4c00}]}})

05:52:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000004", 0x29}], 0x1)

05:52:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d400002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:11 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x2, 0x0, 0x0})

05:52:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

[ 1559.729670] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.738572] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1559.765631] binder: BINDER_SET_CONTEXT_MGR already set
[ 1559.772327] binder: 31614:31615 ioctl 40046207 0 returned -16
05:52:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6c00000000000000}]}})

[ 1559.788036] binder: 31610:31611 ioctl 40046207 0 returned -16
05:52:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cc02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1559.846085] binder_alloc: 31610: binder_alloc_buf, no vma
05:52:11 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80}}], 0x1, 0x0, &(0x7f0000003280))
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000006c0)=0x200, 0x20)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r3, &(0x7f0000000140), 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4)
r4 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000300)="aa9cfa79f3956f0c96361d78aa4cb0f5b55fbb36727d15ca869365de841c258d54f210c8a890de59eeda570ef7c1607238632cbe0a036d853f5a", 0x3a, 0xfffffffffffffff8)
keyctl$instantiate(0xc, r4, &(0x7f0000000380)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', '/dev/zero\x00', 0x20, 0x8}, 0x35, 0xfffffffffffffffd)
recvmsg(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000003fe8))
move_pages(0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580)=[0x0], &(0x7f0000000600)=[0x0], 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612)
write$binfmt_elf64(r3, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={<r5=>0x0, 0x2}, &(0x7f0000000140)=0x8)
syz_open_pts(r1, 0x20000)
setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000240)={r5, 0x5f1}, 0x8)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1559.899371] binder: 31614:31615 transaction failed 29189/-3, size 0-0 line 2973
[ 1559.907297] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1559.917576] binder: 31614:31632 BC_FREE_BUFFER u0000000020001000 no match
[ 1559.919286] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1559.943271] binder: 31614:31632 ioctl c0306201 200002c0 returned -14
05:52:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

05:52:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290120002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:11 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1559.980996] binder_alloc: binder_alloc_mmap_handler: 31614 20001000-20004000 already mapped failed -16
05:52:11 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x400000000000000}]}})

[ 1560.039522] binder_alloc: 31637: binder_alloc_buf, no vma
[ 1560.075342] binder: 31614:31615 transaction failed 29189/-3, size 0-0 line 2973
05:52:11 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902c2002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1560.096971] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1560.133857] binder: 31614:31654 BC_FREE_BUFFER u0000000020001000 no match
05:52:11 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

[ 1560.166899] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.185683] binder: 31614:31643 ioctl 40046207 0 returned -16
[ 1560.283281] binder: 31614:31654 ioctl c0306201 200002c0 returned -14
[ 1560.307864] binder: undelivered TRANSACTION_ERROR: 29189
05:52:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x48000000, 0x0, 0x0})

05:52:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1000000}]}})

05:52:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298f01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

[ 1560.345510] binder: undelivered TRANSACTION_ERROR: 29189
[ 1560.374853] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1560.401264] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1560.428176] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.456506] binder: 31673:31675 ioctl 40046207 0 returned -16
[ 1560.481839] binder_alloc: 31637: binder_alloc_buf, no vma
[ 1560.511911] binder: 31673:31679 transaction failed 29189/-3, size 0-0 line 2973
[ 1560.526108] binder: 31673:31675 BC_FREE_BUFFER u0000000020001000 no match
[ 1560.540326] binder: 31673:31675 ioctl c0306201 200002c0 returned -14
[ 1560.559610] binder_alloc: binder_alloc_mmap_handler: 31673 20001000-20004000 already mapped failed -16
[ 1560.571517] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.584438] binder: 31673:31675 ioctl 40046207 0 returned -16
[ 1560.590361] binder_alloc: 31637: binder_alloc_buf, no vma
[ 1560.590404] binder: 31673:31679 transaction failed 29189/-3, size 0-0 line 2973
[ 1560.591222] binder: 31673:31683 BC_FREE_BUFFER u0000000020001000 no match
[ 1560.610799] binder: 31673:31683 ioctl c0306201 200002c0 returned -14
[ 1560.617586] binder: undelivered TRANSACTION_ERROR: 29189
[ 1560.641949] binder: undelivered TRANSACTION_ERROR: 29189
[ 1560.820672] binder: BINDER_SET_CONTEXT_MGR already set
[ 1560.827125] binder: 31637:31655 ioctl 40046207 0 returned -16
05:52:12 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295b00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:12 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000f4", 0x29}], 0x1)

05:52:12 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x20000000}]}})

05:52:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

05:52:12 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0xdc28, &(0x7f0000000340)="d8c1490bf8e3f60baeb57dcdcac0fbbf94efeb69dd7e0461dd03191c94ee7dbb52ddd5b48a437da7736e7a296834f0f242ea571975fc3c11455f26899d46b7ffc42bab4f2ef7547f238c81b24034c349958b70d7fb5bf11d5d0d4eb1d920b53985bef0ee6d5557cb135fbd637dff78ba220024e5fb6b4ac2357292d96c95bc5d037ac62656ef52f821e314d99ac7870b916e2e1c7e00257ea152a8796006a943e86ab3818ed2b786ec35afd0e9583cd11b503fade042959a237bfc3adbf2604c88005c8d1d16bbad29c81039a1ab9d66e1bae5fc0c97c75ea90ce8583b23877028a4f52527697fdfbc3996195f736f")
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r0, 0x0)
getsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x84800)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc01}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='8,\x00\x00', @ANYRES16=r4, @ANYBLOB="20002dbd7000fbdbdf250d0000001800010008000500000000000c0007000c0000002e0000000c0002000800040009000000"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x400000, 0x0)
ioctl$EVIOCSMASK(r5, 0x40104593, &(0x7f0000000180)={0x1f, 0x96, &(0x7f00000000c0)="f989b7c7b2ac4dafb5c2f16df7fe0aac436191e77357b7d5c24c332a65fc1e92e1be9892b900d54fb7643a0129057de2a8a9d6e25e2d48d48425523333721b6f19f4ee3364552301440d9415d940a66ed79aa732543d94bf74492cd6692c2f0b1eea14e533d0d31a5819ade33382779a626b7a31d6b2a06a52f76e09e45c42e696b61761d120ba5127dc3f74f7e3ab5ca41afe0cf4f6"})

05:52:12 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x100000000000000, 0x0})

05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294c00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1561.281319] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1561.290194] binder: 31691:31693 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:13 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r1})

[ 1561.363711] binder: 31696:31698 ioctl dc28 20000340 returned -22
[ 1561.376835] binder_alloc: binder_alloc_mmap_handler: 31691 20001000-20004000 already mapped failed -16
[ 1561.388051] binder: BINDER_SET_CONTEXT_MGR already set
05:52:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4800}]}})

[ 1561.420556] binder: 31696:31698 ioctl 40046207 0 returned -16
[ 1561.447773] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.471098] binder: 31696:31705 ioctl dc28 20000340 returned -22
[ 1561.480556] binder: 31691:31693 ioctl 40046207 0 returned -16
[ 1561.492664] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1561.496842] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.507322] binder: 31691:31714 BC_FREE_BUFFER u0000000020001000 no match
05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29dc01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1561.517553] binder: 31696:31705 ioctl 40046207 0 returned -16
[ 1561.530823] binder_alloc: 31691: binder_alloc_buf, no vma
[ 1561.544951] binder: 31691:31707 transaction failed 29189/-3, size 0-0 line 2973
[ 1561.545745] binder: send failed reply for transaction 717 to 31691:31693
05:52:13 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
rt_sigprocmask(0x2, &(0x7f0000000000)={0x4}, &(0x7f0000000040), 0xffffffffffffff75)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x401, 0x20000)
setsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f00000000c0)=0x80b, 0x4)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000002, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3000000}]}})

05:52:13 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1561.585250] binder: undelivered TRANSACTION_COMPLETE
[ 1561.590379] binder: undelivered TRANSACTION_ERROR: 29189
05:52:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x74000000, 0x0})

05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902db002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1561.650516] binder: undelivered TRANSACTION_ERROR: 29189
[ 1561.726186] binder: 31723:31726 ioctl c0306201 0 returned -14
[ 1561.735026] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1561.752546] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.766220] binder: 31733:31734 ioctl 40046207 0 returned -16
05:52:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29025d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1561.773007] binder_alloc: 31723: binder_alloc_buf, no vma
[ 1561.775071] binder: BINDER_SET_CONTEXT_MGR already set
[ 1561.779161] binder: 31733:31734 transaction failed 29189/-3, size 0-0 line 2973
[ 1561.795195] binder: 31723:31735 ioctl 40046207 0 returned -16
[ 1561.795302] binder: 31733:31734 BC_FREE_BUFFER u0000000020001000 no match
[ 1561.813170] binder: 31723:31726 ioctl c0306201 0 returned -14
05:52:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4000000}]}})

[ 1561.844107] binder_alloc: binder_alloc_mmap_handler: 31733 20001000-20004000 already mapped failed -16
05:52:13 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
fcntl$setflags(r0, 0x2, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1561.918243] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1561.926428] binder_alloc: 31733: binder_alloc_buf, no vma
[ 1561.944879] binder: 31733:31753 transaction failed 29189/-3, size 0-0 line 2973
[ 1561.954439] binder: 31733:31741 BC_FREE_BUFFER u0000000020001000 no match
[ 1561.962443] binder: undelivered TRANSACTION_ERROR: 29189
05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900cd002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6800}]}})

05:52:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000007", 0x29}], 0x1)

05:52:13 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6c00, 0x0})

05:52:13 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1562.058161] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.063525] binder: 31756:31759 ioctl 40046207 0 returned -16
[ 1562.077421] binder: undelivered TRANSACTION_ERROR: 29189
[ 1562.113740] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:13 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294600002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:13 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x2)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
socketpair(0x11, 0xb, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x200, 0x200, 0xfffffffffffffffc, 0xffffffffffffffeb, 0x8, 0x3, 0xffffffffffffff80, 0x4, 0x9, 0x2, 0x7fffffff, 0x9e})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x15, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:13 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x300000000000000}]}})

05:52:13 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000013", 0x29}], 0x1)

[ 1562.228333] binder: 31772:31776 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1562.317485] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1562.329682] binder_alloc: binder_alloc_mmap_handler: 31772 20001000-20004000 already mapped failed -16
05:52:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f300002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1562.358570] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.372892] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.393297] binder: 31788:31791 ioctl 40046207 0 returned -16
[ 1562.402759] binder: 31772:31776 ioctl 40046207 0 returned -16
05:52:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x3f00}]}})

05:52:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299a00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1562.442937] binder_alloc: 31772: binder_alloc_buf, no vma
[ 1562.450044] binder: 31772:31797 transaction failed 29189/-3, size 0-0 line 2973
[ 1562.471874] binder: 31772:31789 BC_FREE_BUFFER u0000000020001000 no match
05:52:14 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000000c0)="3e579e52be631665acfaa496bd02b6ca", 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:14 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1562.524865] binder: release 31772:31776 transaction 725 out, still active
[ 1562.526444] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1562.532832] binder: undelivered TRANSACTION_COMPLETE
[ 1562.552895] binder: send failed reply for transaction 725, target dead
05:52:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7000000, 0x0})

05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290032002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1562.678101] binder: BINDER_SET_CONTEXT_MGR already set
05:52:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x6}]}})

[ 1562.710724] binder: 31811:31819 ioctl 40046207 0 returned -16
[ 1562.743221] binder: 31823:31826 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1562.772978] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:14 executing program 1:
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1562.818346] binder_alloc: binder_alloc_mmap_handler: 31823 20001000-20004000 already mapped failed -16
[ 1562.875261] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.889087] binder: BINDER_SET_CONTEXT_MGR already set
[ 1562.894521] binder: 31823:31826 ioctl 40046207 0 returned -16
05:52:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4800000000000000}]}})

05:52:14 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1562.918787] binder_alloc: 31823: binder_alloc_buf, no vma
[ 1562.931262] binder: 31836:31838 ioctl 40046207 0 returned -16
[ 1562.986245] binder: release 31823:31826 transaction 730 out, still active
[ 1562.993245] binder: undelivered TRANSACTION_COMPLETE
[ 1563.015633] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:14 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1563.061904] binder: send failed reply for transaction 730, target dead
05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500000a", 0x29}], 0x1)

05:52:14 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6000000000000000, 0x0})

05:52:14 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = semget$private(0x0, 0x3, 0x0)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000000)=[0xe7, 0x7f, 0x7, 0x8])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:14 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290142002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:14 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x200000000000000}]}})

05:52:14 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000012", 0x29}], 0x1)

05:52:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290203002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1563.247890] binder: BINDER_SET_CONTEXT_MGR already set
[ 1563.254198] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1563.273075] binder: 31862:31866 ioctl 40046207 0 returned -16
[ 1563.273130] binder: BINDER_SET_CONTEXT_MGR already set
05:52:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x74000000}]}})

[ 1563.344728] binder_alloc: 31861: binder_alloc_buf, no vma
[ 1563.352123] binder: 31861:31874 ioctl 40046207 0 returned -16
[ 1563.363624] binder_alloc: binder_alloc_mmap_handler: 31862 20001000-20004000 already mapped failed -16
[ 1563.381850] binder: BINDER_SET_CONTEXT_MGR already set
05:52:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500000f", 0x29}], 0x1)

[ 1563.401579] binder: 31862:31866 ioctl 40046207 0 returned -16
[ 1563.424168] binder_alloc: 31861: binder_alloc_buf, no vma
05:52:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290041002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:15 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80002, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1563.466164] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:15 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x68000000, 0x0})

05:52:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4c000000}]}})

[ 1563.587733] binder: 31898:31900 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1563.599175] binder: BINDER_SET_CONTEXT_MGR already set
[ 1563.620539] binder: 31897:31899 ioctl 40046207 0 returned -16
05:52:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299c00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1563.655215] binder_alloc: binder_alloc_mmap_handler: 31898 20001000-20004000 already mapped failed -16
[ 1563.670566] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1563.682959] binder: BINDER_SET_CONTEXT_MGR already set
[ 1563.689950] binder: 31897:31909 ioctl 40046207 0 returned -16
[ 1563.696454] binder: BINDER_SET_CONTEXT_MGR already set
05:52:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1563.718444] binder: 31898:31900 ioctl 40046207 0 returned -16
[ 1563.750655] binder_alloc: 31898: binder_alloc_buf, no vma
05:52:15 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x300}]}})

[ 1563.808049] binder: send failed reply for transaction 737 to 31898:31900
05:52:15 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4, 0x0})

[ 1563.863186] binder: undelivered TRANSACTION_COMPLETE
05:52:15 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1564.017464] binder: 31929:31930 ioctl c0306201 0 returned -14
[ 1564.026942] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1564.039337] binder: BINDER_SET_CONTEXT_MGR already set
05:52:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:15 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4800000000000000]}]}})

[ 1564.071641] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.080590] binder: 31925:31934 ioctl 40046207 0 returned -16
[ 1564.091128] binder: 31929:31930 ioctl c0306201 0 returned -14
[ 1564.150390] binder: 31929:31936 ioctl 40046207 0 returned -16
[ 1564.168519] binder_alloc: binder_alloc_mmap_handler: 31925 20001000-20004000 already mapped failed -16
[ 1564.183338] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:15 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290127002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:15 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x414002, 0x0)
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040))
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:15 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1564.206864] binder_thread_write: 5 callbacks suppressed
[ 1564.206874] binder: 31925:31944 BC_FREE_BUFFER u0000000020001000 no match
05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x400000000000000]}]}})

[ 1564.307823] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.319401] binder: 31958:31960 ioctl 40046207 0 returned -16
05:52:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902a2002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xffffff7f, 0x0})

[ 1564.358499] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:16 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r1=>0x0)
prlimit64(r1, 0xf, &(0x7f0000000040)={0x8, 0x100}, &(0x7f0000000080))
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7]}]}})

[ 1564.463574] binder: 31971:31972 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290065002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1564.553548] binder_alloc: binder_alloc_mmap_handler: 31971 20001000-20004000 already mapped failed -16
[ 1564.566389] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1564.578554] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.595797] binder: BINDER_SET_CONTEXT_MGR already set
05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6000000000000000]}]}})

05:52:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b0500000b", 0x29}], 0x1)

[ 1564.601495] binder: 31978:31979 ioctl 40046207 0 returned -16
[ 1564.617347] binder: 31971:31972 ioctl 40046207 0 returned -16
[ 1564.641612] binder: BINDER_SET_CONTEXT_MGR already set
05:52:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000022000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1564.673276] binder: 31978:31990 ioctl 40046207 0 returned -16
[ 1564.679464] binder_transaction: 6 callbacks suppressed
[ 1564.679484] binder: 31971:31994 transaction failed 29189/-3, size 0-0 line 2973
[ 1564.708982] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x33fe0}], 0x1)

[ 1564.725539] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1564.731752] binder: 31971:31984 BC_FREE_BUFFER u0000000020001000 no match
[ 1564.759610] binder: release 31971:31972 transaction 745 out, still active
[ 1564.770427] binder: undelivered TRANSACTION_COMPLETE
05:52:16 executing program 1:
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x2010, r0, 0x0)
r3 = mmap$binder(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x80010, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0xb8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="c1cb9377b477ed04fc0e63044003000000030000c8ca27539b889cfed35002a753596f8fe5e7d3a298564b", @ANYRES64=r2, @ANYBLOB="00000000000000000f630c4003000000020000000000000003630840", @ANYRES64=r3, @ANYBLOB="11634840000000000000000003000000000000000000000001000000000000000000000000000000000000003800000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000780000000000000020000000000000007800000000000000700000000000000030000000000000001800000000000000"], @ANYBLOB="010000000100000006630440020000000563044000000000076304400200000009631040", @ANYRES64, @ANYBLOB="0400000000000000"], 0xb8, 0x0, &(0x7f0000000140)="ab9ebaacdd28a263fbda3b0e6db86d67917b89188d4f0f0930f7f162abe20d8967b6ca6fab3070b2968403fc415314aaad8e3491f5cab92a895abe6e290e746e3f7b08c078cd6e3962d732e365bf9bf8c389064b19ed65c6ea356fe1382e40d211cdd3f0919a30848fab812ee3aeadb86fb780d4ff033a11eecb5af57cfe7cc8318b1e951a196e5cb9c14868efe1c9d7c42fce3b97a3fe0a6c7c33e854e9dbce058e66e102242353e37aa90d1d6b9346825a275744a005f0"})
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x80)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000080))

05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x5000000]}]}})

[ 1564.807951] binder: send failed reply for transaction 745, target dead
05:52:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6c000000, 0x0})

05:52:16 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1564.856097] binder_release_work: 8 callbacks suppressed
[ 1564.856107] binder: undelivered TRANSACTION_ERROR: 29189
[ 1564.896247] binder: 32009:32010 unknown command 2006174657
05:52:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d202002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1564.919029] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1564.925174] binder: 32013:32014 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1564.930428] binder: BINDER_SET_CONTEXT_MGR already set
[ 1564.942355] binder: 32009:32010 ioctl c0306201 20000200 returned -22
05:52:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x2c}], 0x1)

[ 1564.985613] binder: 32013:32016 transaction failed 29189/-3, size 0-0 line 2973
[ 1564.993212] binder: BINDER_SET_CONTEXT_MGR already set
05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7a00]}]}})

[ 1565.040349] binder: 32013:32014 ioctl 40046207 0 returned -16
[ 1565.040371] binder: 32013:32027 BC_FREE_BUFFER u0000000020001000 no match
[ 1565.049936] binder: 32009:32017 ioctl 40046207 0 returned -16
05:52:16 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d401002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1565.086303] binder: release 32013:32014 transaction 749 out, still active
[ 1565.095967] binder: undelivered TRANSACTION_COMPLETE
[ 1565.112398] binder: 32009:32031 unknown command 2006174657
[ 1565.121125] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1565.127795] binder: send failed reply for transaction 749, target dead
05:52:16 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x60000000, 0x0})

05:52:16 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4800]}]}})

[ 1565.164466] binder: 32009:32031 ioctl c0306201 20000200 returned -22
[ 1565.193008] binder: undelivered TRANSACTION_ERROR: 29189
05:52:16 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x20ac9029}], 0x1)

05:52:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffe)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1565.286405] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1565.316825] binder: 32045:32046 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290136002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1565.359069] binder: 32050:32052 ioctl c0306201 0 returned -14
05:52:17 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x200000000000000]}]}})

[ 1565.402934] binder: 32050:32057 ioctl c0306201 0 returned -14
[ 1565.419500] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1565.419519] binder_alloc: binder_alloc_mmap_handler: 32045 20001000-20004000 already mapped failed -16
05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x7ffff000}], 0x1)

[ 1565.454460] binder: BINDER_SET_CONTEXT_MGR already set
[ 1565.471621] binder: 32045:32046 ioctl 40046207 0 returned -16
[ 1565.485039] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1565.496178] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1565.496188] binder_alloc: 32045: binder_alloc_buf, no vma
[ 1565.512378] print_req_error: I/O error, dev loop0, sector 0
[ 1565.518311] buffer_io_error: 22 callbacks suppressed
[ 1565.518325] Buffer I/O error on dev loop0, logical block 0, lost async page write
[ 1565.523470] Buffer I/O error on dev loop0, logical block 1, lost async page write
[ 1565.523507] Buffer I/O error on dev loop0, logical block 2, lost async page write
[ 1565.537607] print_req_error: I/O error, dev loop0, sector 92
05:52:17 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x104)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000040))
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1565.540065] Buffer I/O error on dev loop0, logical block 3, lost async page write
[ 1565.546787] Buffer I/O error on dev loop0, logical block 23, lost async page write
[ 1565.552597] Buffer I/O error on dev loop0, logical block 4, lost async page write
[ 1565.560286] Buffer I/O error on dev loop0, logical block 24, lost async page write
[ 1565.568132] Buffer I/O error on dev loop0, logical block 5, lost async page write
[ 1565.575754] Buffer I/O error on dev loop0, logical block 25, lost async page write
[ 1565.583445] Buffer I/O error on dev loop0, logical block 6, lost async page write
05:52:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293001002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x1b}], 0x1)

[ 1565.629198] binder: send failed reply for transaction 752 to 32045:32046
[ 1565.639867] binder: 32045:32059 transaction failed 29189/-3, size 0-0 line 2973
[ 1565.653418] binder: BINDER_SET_CONTEXT_MGR already set
05:52:17 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x1000000]}]}})

05:52:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xfffffdfd, 0x0})

[ 1565.688994] binder: undelivered TRANSACTION_ERROR: 29189
[ 1565.694930] binder: 32071:32074 ioctl 40046207 0 returned -16
[ 1565.714006] binder: undelivered TRANSACTION_COMPLETE
[ 1565.724307] binder: undelivered TRANSACTION_ERROR: 29189
05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xec0}], 0x1)

[ 1565.770962] binder: 32081:32083 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1565.777281] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1565.796857] binder_alloc: binder_alloc_mmap_handler: 32081 20001000-20004000 already mapped failed -16
05:52:17 executing program 1:
syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1a0)
ioctl$TIOCSTI(r1, 0x5412, 0x10001)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1565.826869] binder: BINDER_SET_CONTEXT_MGR already set
05:52:17 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x48000000]}]}})

[ 1565.877641] binder: 32081:32083 ioctl 40046207 0 returned -16
[ 1565.888443] binder: 32081:32092 BC_FREE_BUFFER u0000000020001000 no match
[ 1565.908462] binder_alloc: 32081: binder_alloc_buf, no vma
[ 1565.927377] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xfffffdef}], 0x1)

05:52:17 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290214002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1565.968511] binder: send failed reply for transaction 756 to 32081:32083
[ 1565.983343] binder: 32081:32085 transaction failed 29189/-3, size 0-0 line 2973
[ 1565.997126] binder: undelivered TRANSACTION_COMPLETE
05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xfffffffffffffdef}], 0x1)

[ 1566.014859] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.020200] binder: 32095:32104 ioctl 40046207 0 returned -16
[ 1566.020322] binder: undelivered TRANSACTION_ERROR: 29189
05:52:17 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4c]}]}})

05:52:17 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6, 0x0})

05:52:17 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901b6002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1566.128187] binder: undelivered TRANSACTION_ERROR: 29189
05:52:17 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x8000)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:17 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xc0}], 0x1)

[ 1566.197606] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1566.197730] binder: 32120:32121 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:18 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x68]}]}})

05:52:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290231002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1566.328782] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.333295] binder_alloc: binder_alloc_mmap_handler: 32120 20001000-20004000 already mapped failed -16
[ 1566.358855] binder: 32129:32131 ioctl 40046207 0 returned -16
[ 1566.388325] binder: 32129:32137 ioctl c0306201 0 returned -14
[ 1566.409480] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1566.418371] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.427665] binder: BINDER_SET_CONTEXT_MGR already set
05:52:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xf}], 0x1)

05:52:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b302002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1566.434814] binder: 32120:32121 ioctl 40046207 0 returned -16
[ 1566.440811] binder: 32129:32137 ioctl 40046207 0 returned -16
[ 1566.451938] binder: 32120:32144 BC_FREE_BUFFER u0000000020001000 no match
[ 1566.460249] binder: 32129:32131 ioctl c0306201 0 returned -14
[ 1566.467137] binder_alloc: 32120: binder_alloc_buf, no vma
[ 1566.485232] binder: 32120:32139 transaction failed 29189/-3, size 0-0 line 2973
05:52:18 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x60]}]}})

05:52:18 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40, 0x0)
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0xfffffffffffffffc)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1566.512421] binder: release 32120:32121 transaction 760 out, still active
[ 1566.520791] binder: undelivered TRANSACTION_COMPLETE
[ 1566.534161] binder: send failed reply for transaction 760, target dead
05:52:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x10}], 0x1)

05:52:18 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x48, 0x0})

[ 1566.627143] binder: undelivered TRANSACTION_ERROR: 29189
05:52:18 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295402002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1566.670379] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xfdef}], 0x1)

05:52:18 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
write$P9_RMKDIR(r1, &(0x7f0000000080)={0x14, 0x49, 0x1, {0x34, 0x4, 0x2}}, 0x14)

05:52:18 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0xfecaedfe00000000]}]}})

[ 1566.749596] binder: 32166:32167 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1566.818558] binder_alloc: binder_alloc_mmap_handler: 32166 20001000-20004000 already mapped failed -16
[ 1566.857961] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.872231] binder: 32166:32167 ioctl 40046207 0 returned -16
[ 1566.872294] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1566.879679] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.890499] binder_alloc: 32166: binder_alloc_buf, no vma
[ 1566.897169] binder: 32166:32175 transaction failed 29189/-3, size 0-0 line 2973
[ 1566.905365] binder: 32177:32179 ioctl 40046207 0 returned -16
[ 1566.928626] binder: 32166:32182 BC_FREE_BUFFER u0000000020001000 no match
[ 1566.933851] binder: BINDER_SET_CONTEXT_MGR already set
[ 1566.941310] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1566.948140] binder: 32177:32183 ioctl 40046207 0 returned -16
[ 1566.961317] binder: release 32166:32167 transaction 763 out, still active
[ 1566.974422] binder: undelivered TRANSACTION_COMPLETE
[ 1566.990261] binder: send failed reply for transaction 763, target dead
[ 1567.015227] binder: undelivered TRANSACTION_ERROR: 29189
05:52:19 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x8)

05:52:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901b7002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:19 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x9}, 0x4)

05:52:19 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x600]}]}})

05:52:19 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x74, 0x0})

05:52:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29024b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1567.414972] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1567.428995] binder: 32191:32198 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1567.447537] binder: BINDER_SET_CONTEXT_MGR already set
05:52:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x2)

[ 1567.465631] binder: 32192:32193 ioctl 40046207 0 returned -16
[ 1567.486467] binder_alloc: binder_alloc_mmap_handler: 32191 20001000-20004000 already mapped failed -16
[ 1567.503858] binder: BINDER_SET_CONTEXT_MGR already set
05:52:19 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2000]}]}})

05:52:19 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298400002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1567.526902] binder: 32192:32208 ioctl 40046207 0 returned -16
[ 1567.531785] binder: BINDER_SET_CONTEXT_MGR already set
[ 1567.557638] binder: 32191:32198 ioctl 40046207 0 returned -16
[ 1567.557659] binder_alloc: 32191: binder_alloc_buf, no vma
05:52:19 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10000, 0x0)
mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x80)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0xffffff1f)

[ 1567.609636] binder: 32191:32217 BC_FREE_BUFFER u0000000020001000 no match
[ 1567.609740] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1567.633903] binder: release 32191:32198 transaction 766 out, still active
[ 1567.642327] binder: 32191:32212 transaction failed 29189/-3, size 0-0 line 2973
[ 1567.665234] binder: undelivered TRANSACTION_COMPLETE
[ 1567.689830] binder: send failed reply for transaction 766, target dead
[ 1567.710453] binder: BINDER_SET_CONTEXT_MGR already set
[ 1567.723955] binder: 32221:32226 ioctl 40046207 0 returned -16
[ 1567.797083] binder: undelivered TRANSACTION_ERROR: 29189
05:52:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:20 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x48]}]}})

05:52:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290089002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40800, 0x0)
ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000040)=0x1ce1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = dup3(r0, r1, 0x80000)
ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x90)

05:52:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x200000000000000, 0x0})

05:52:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x300)

[ 1568.343029] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1568.359422] binder: 32239:32240 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1568.375556] binder: BINDER_SET_CONTEXT_MGR already set
[ 1568.380902] binder: 32242:32243 ioctl 40046207 0 returned -16
05:52:20 executing program 4:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0xa000)
r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x0)
fcntl$dupfd(r1, 0x406, r1)
renameat2(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x5)
times(&(0x7f00000001c0))
write$P9_RXATTRWALK(r0, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0x6}, 0xf)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140))
socket$bt_rfcomm(0x1f, 0x3, 0x3)
socket$netlink(0x10, 0x3, 0x6)

05:52:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290121002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:20 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6800000000000000]}]}})

[ 1568.437837] binder_alloc: binder_alloc_mmap_handler: 32239 20001000-20004000 already mapped failed -16
[ 1568.472502] binder: 32242:32253 ioctl ab01 90 returned -22
[ 1568.482788] binder: BINDER_SET_CONTEXT_MGR already set
[ 1568.509840] binder: 32239:32240 ioctl 40046207 0 returned -16
[ 1568.518925] binder: BINDER_SET_CONTEXT_MGR already set
[ 1568.537822] binder: 32239:32265 BC_FREE_BUFFER u0000000020001000 no match
[ 1568.547049] binder: 32242:32249 ioctl 40046207 0 returned -16
[ 1568.549395] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x18000, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x100000000000015b)

[ 1568.553114] binder_alloc: 32239: binder_alloc_buf, no vma
05:52:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900d8002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000000000000)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xf990000, 0x5, 0x100000000, [], &(0x7f00000000c0)={0xbb0953, 0x9, [], @string=&(0x7f0000000080)=0x266}})
r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x101, 0x2000)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={<r4=>0x0, 0x2, 0xfff}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x5, 0x4, 0x8, 0x6, 0x9, 0x81, 0xff, 0x100000001, r4}, 0x20)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000240)=""/185)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
connect$can_bcm(r3, &(0x7f0000000300), 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x2)

[ 1568.592419] binder: release 32239:32240 transaction 770 out, still active
[ 1568.594045] binder: 32239:32257 transaction failed 29189/-3, size 0-0 line 2973
[ 1568.604291] binder: undelivered TRANSACTION_COMPLETE
[ 1568.622397] binder: send failed reply for transaction 770, target dead
[ 1568.720050] binder: 32274:32275 ioctl 40086602 20000340 returned -22
[ 1568.743643] binder: undelivered TRANSACTION_ERROR: 29189
[ 1568.751201] binder: BINDER_SET_CONTEXT_MGR already set
[ 1568.777819] binder: 32274:32277 ioctl 40046207 0 returned -16
05:52:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:20 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x60000000]}]}})

05:52:20 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xffffff7f00000000, 0x0})

05:52:20 executing program 4:
prctl$PR_GET_THP_DISABLE(0x2a)
r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000)
ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @local}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x36, {0x2, 0x4e23, @remote}, 'veth1_to_bridge\x00'})
r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp], 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x5, 0x1])
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={<r3=>0x0, 0x80000, r0})
ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000180)={r3})
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r4, @ANYBLOB="00042abd7000fddbdf2504000000080004000800000008000600ae986639400002000800030007000000080003000200000014000100ffffffff00000000001000000000000008000300010000000800050008000000080004000700000008000600010400006400020008000700040000110800080009000000080006000200000008860800000000000000010000000000000000000000000000000001080004003400000008000800050000000800080040000000140001000000000000000000000000000000000008000600900c0000"], 0xd8}, 0x1, 0x0, 0x0, 0x4094}, 0x4)
writev(r2, &(0x7f0000000040), 0x1)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$LOOP_SET_FD(r2, 0x4c00, r5)

05:52:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299201002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
splice(r1, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x2000, 0xa)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1569.062373] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1569.074657] binder: 32285:32286 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1569.087440] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.092762] binder: 32287:32294 ioctl 40046207 0 returned -16
05:52:20 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7400]}]}})

05:52:20 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296b01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:20 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xb)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000080)={<r2=>0x0, 0x3, 0x0, 0x400, 0xfffffffffffffff7}, &(0x7f00000000c0)=0x18)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xffffffffffffffc0, 0x0, 0x9, 0x0, r2}, &(0x7f0000000140)=0x10)
fadvise64(r1, 0x0, 0xfffffffffffffff7, 0x3)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f00000001c0)={0x9, 0x2, 0x10001, 'queue0\x00', 0x114e})
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000180)=0x80000001, 0x4)

[ 1569.125209] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.136828] binder: 32287:32299 ioctl 40046207 0 returned -16
[ 1569.164524] binder_alloc: binder_alloc_mmap_handler: 32285 20001000-20004000 already mapped failed -16
05:52:20 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0xba29cc7de3840f87, 0x180010, r0, 0x0)

05:52:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1569.209184] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.239513] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1569.246056] binder: 32285:32286 ioctl 40046207 0 returned -16
[ 1569.288450] binder: BINDER_SET_CONTEXT_MGR already set
05:52:21 executing program 4:
socketpair(0x2, 0x3, 0x2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x1, 0x1000, 0x8000, 0x4321, 0x8000008})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:21 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0xfeedcafe]}]}})

[ 1569.322969] binder: 32313:32314 ioctl 40046207 0 returned -16
[ 1569.323005] binder_alloc: 32285: binder_alloc_buf, no vma
05:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c400002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1569.366616] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.368682] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1569.371987] binder: 32313:32318 ioctl 40046207 0 returned -16
[ 1569.385436] binder: 32285:32301 BC_FREE_BUFFER u0000000020001000 no match
[ 1569.394859] binder: 32285:32317 transaction failed 29189/-3, size 0-0 line 2973
[ 1569.427165] binder: send failed reply for transaction 774 to 32285:32286
05:52:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4c000000, 0x0})

05:52:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(0x0, 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:21 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x2, 0x0)
r1 = signalfd(r0, &(0x7f0000000040)={0x3ff}, 0x8)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000001c0)={0x7, 0x97, 0x0, 0x2, 0x100000000})
r2 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x7edbe0beee85215c, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0x0, 0x2})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000000c0)={'team0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@loopback, @loopback, @mcast2, 0x2, 0xf0d, 0x1, 0x100, 0x6, 0x80000000, r5})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0x1, 0x8}, 0x1, 0x401, 0x4, {0x8, 0x2}, 0x234, 0x6})

[ 1569.513194] binder: undelivered TRANSACTION_COMPLETE
05:52:21 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2]}]}})

05:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297c01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1569.614462] binder: 32334:32342 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1569.617682] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.638591] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1569.656747] binder: 32336:32339 ioctl 40046207 0 returned -16
05:52:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29025f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1569.673700] binder_alloc: binder_alloc_mmap_handler: 32334 20001000-20004000 already mapped failed -16
[ 1569.703302] binder: BINDER_SET_CONTEXT_MGR already set
05:52:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x1)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:21 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7a00000000000000]}]}})

[ 1569.731483] binder: 32336:32339 ioctl 40046207 0 returned -16
[ 1569.775680] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.789209] binder_alloc: 32334: binder_alloc_buf, no vma
05:52:21 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x106, 0xf}}, 0x20)
fsetxattr$security_smack_entry(r0, &(0x7f00000001c0)='security.SMACK64IPIN\x00', &(0x7f0000000200)='(\x00', 0x2, 0x2)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r2, 0xc0f8}}, 0x18)

05:52:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1569.824169] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1569.850133] binder: 32334:32366 BC_FREE_BUFFER u0000000020001000 no match
[ 1569.850482] binder: 32334:32342 ioctl 40046207 0 returned -16
[ 1569.905429] binder: BINDER_SET_CONTEXT_MGR already set
[ 1569.913208] binder: 32334:32358 transaction failed 29189/-3, size 0-0 line 2973
[ 1569.922187] binder: release 32334:32342 transaction 777 out, still active
[ 1569.943399] binder: 32369:32370 ioctl 40046207 0 returned -16
[ 1569.951910] binder: undelivered TRANSACTION_COMPLETE
[ 1569.961532] binder: send failed reply for transaction 777, target dead
05:52:21 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4800, 0x0})

05:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290222002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:21 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xc6efd906934e60e)
writev(r0, &(0x7f0000000080), 0xfffffffffffff6b)
socketpair(0x11, 0x800, 0x7fff, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x7, 0xffffffffffff55e8, 0x4, 0x8, 0xfff, 0x200, 0x81, 0x1ff, 0x1, 0x8})

05:52:21 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7a000000]}]}})

05:52:21 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1570.014067] binder_release_work: 2 callbacks suppressed
[ 1570.014076] binder: undelivered TRANSACTION_ERROR: 29189
[ 1570.046804] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:21 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:21 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6000]}]}})

[ 1570.085372] binder: 32383:32384 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1570.125131] binder_alloc: binder_alloc_mmap_handler: 32383 20001000-20004000 already mapped failed -16
05:52:21 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290157002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:21 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
arch_prctl$ARCH_SET_GS(0x1001, 0x9)
clock_adjtime(0x1, &(0x7f0000000000)={0x7, 0x8f9f, 0x80, 0xffff, 0x10001, 0x8001, 0x4, 0xffffffff7fffffff, 0x1f2, 0x80000001, 0x993a, 0x0, 0x9, 0x7, 0x4, 0x8013521, 0x40, 0xda, 0x319740, 0x10000, 0x4, 0xfffffffffffffffb, 0x5a9, 0x0, 0x80000000, 0xa1b})

[ 1570.169752] binder: BINDER_SET_CONTEXT_MGR already set
[ 1570.196217] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1570.211545] binder: 32383:32384 ioctl 40046207 0 returned -16
[ 1570.229309] binder: 32396:32398 ioctl 6609 0 returned -22
[ 1570.229487] binder_alloc: 32383: binder_alloc_buf, no vma
05:52:22 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x3]}]}})

[ 1570.266386] binder: 32383:32401 transaction failed 29189/-3, size 0-0 line 2973
[ 1570.274288] binder: 32396:32404 ioctl 6609 0 returned -22
[ 1570.295233] binder: 32383:32389 BC_FREE_BUFFER u0000000020001000 no match
05:52:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040), 0x10000000000002fe)

05:52:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(0x0, 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1570.320156] binder: release 32383:32384 transaction 781 out, still active
[ 1570.334106] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1570.341780] binder: undelivered TRANSACTION_COMPLETE
[ 1570.396388] binder: send failed reply for transaction 781, target dead
05:52:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7, 0x0})

05:52:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4)
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, &(0x7f0000000080)=0xc)
ioctl$TIOCEXCL(r1, 0x540c)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
fstat(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
chown(&(0x7f0000000240)='./file0\x00', r3, r4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
lseek(r2, 0x0, 0x3)

05:52:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290058002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:22 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6]}]}})

[ 1570.444437] binder: undelivered TRANSACTION_ERROR: 29189
05:52:22 executing program 4:
r0 = socket$inet_sctp(0x2, 0x0, 0x84)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(0x0, 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1570.515772] binder: 32420:32421 ioctl 540c 0 returned -22
[ 1570.528287] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1570.541574] binder: 32420:32421 ioctl c0306201 0 returned -14
[ 1570.545453] binder: BINDER_SET_CONTEXT_MGR already set
05:52:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296c00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1570.574799] binder: 32425:32429 ioctl 40046207 0 returned -16
[ 1570.587813] binder: 32420:32436 ioctl 540c 0 returned -22
[ 1570.603052] binder_alloc: 32420: binder_alloc_buf, no vma
[ 1570.635317] binder: BINDER_SET_CONTEXT_MGR already set
05:52:22 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7400000000000000]}]}})

[ 1570.665257] binder: 32425:32429 BC_FREE_BUFFER u0000000020001000 no match
[ 1570.665282] binder: 32420:32436 ioctl 40046207 0 returned -16
[ 1570.695065] binder: 32425:32437 transaction failed 29189/-3, size 0-0 line 2973
[ 1570.696684] binder: 32420:32421 ioctl c0306201 0 returned -14
05:52:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(0x0, 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1570.740780] binder_alloc: binder_alloc_mmap_handler: 32425 20001000-20004000 already mapped failed -16
05:52:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1fd)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0))
bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x1, @broadcast}}, 0x1e)

[ 1570.790750] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1570.837362] binder_alloc: 32425: binder_alloc_buf, no vma
[ 1570.880377] binder: 32425:32437 transaction failed 29189/-3, size 0-0 line 2973
[ 1570.883502] binder: 32425:32462 BC_FREE_BUFFER u0000000020001000 no match
[ 1570.917729] binder: BINDER_SET_CONTEXT_MGR already set
[ 1570.923073] binder: 32456:32457 ioctl 40046207 0 returned -16
[ 1570.967212] binder: 32456:32457 ioctl c0306201 0 returned -14
[ 1570.981566] binder: undelivered TRANSACTION_ERROR: 29189
[ 1571.005310] binder: 32456:32457 ioctl c0306201 0 returned -14
05:52:22 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x3, 0x0})

05:52:22 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x600000000000000]}]}})

05:52:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290014002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:22 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsh0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xf}}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x93dd}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7fff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x20040010)

[ 1571.024131] binder: 32456:32470 ioctl c0306201 0 returned -14
[ 1571.027798] binder: undelivered TRANSACTION_ERROR: 29189
[ 1571.039157] binder: 32456:32470 ioctl c0306201 0 returned -14
[ 1571.075457] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1571.098091] binder: 32480:32481 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1571.112797] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:22 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x101040)
write$eventfd(r2, &(0x7f0000000040)=0x100000001, 0x8)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x4010, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

05:52:22 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x9, 0x2, 0x2, &(0x7f0000ffb000/0x2000)=nil, 0x830})

05:52:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29012e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1571.160502] binder_alloc: binder_alloc_mmap_handler: 32480 20001000-20004000 already mapped failed -16
05:52:22 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x74000000]}]}})

[ 1571.256661] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.262011] binder: 32493:32494 ioctl 40046207 0 returned -16
[ 1571.283223] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1571.297497] binder_alloc: 32480: binder_alloc_buf, no vma
05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29fc00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1571.315040] binder: 32480:32487 transaction failed 29189/-3, size 0-0 line 2973
[ 1571.319929] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.330031] binder: 32493:32503 ioctl c0306201 0 returned -14
[ 1571.350157] binder: 32480:32500 ioctl 40046207 0 returned -16
05:52:23 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x20000000]}]}})

05:52:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1571.375293] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.375318] binder: 32493:32505 ioctl c0306201 0 returned -14
[ 1571.395069] binder: 32480:32504 BC_FREE_BUFFER u0000000020001000 no match
[ 1571.438266] binder: send failed reply for transaction 789 to 32480:32481
[ 1571.455335] binder: 32493:32503 ioctl 40046207 0 returned -16
[ 1571.466777] binder: undelivered TRANSACTION_COMPLETE
05:52:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x60000)
ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000080)=0x1)

05:52:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x5, 0x0})

05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290059002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1571.487839] binder: undelivered TRANSACTION_ERROR: 29189
[ 1571.505444] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1571.523050] binder: undelivered TRANSACTION_ERROR: 29189
05:52:23 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4000000000000000, 0x120113, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = getpid()
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000000080)=""/4)
fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2})

[ 1571.568294] netlink: 'syz-executor4': attribute type 1 has an invalid length.
[ 1571.585051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'.
05:52:23 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6c]}]}})

[ 1571.618419] binder: 32522:32523 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290230002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1571.661139] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.668573] binder_alloc: binder_alloc_mmap_handler: 32522 20001000-20004000 already mapped failed -16
[ 1571.686354] binder: 32527:32529 ioctl 40046207 0 returned -16
[ 1571.693853] netlink: 'syz-executor4': attribute type 1 has an invalid length.
[ 1571.717579] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1571.726217] binder_alloc: 32522: binder_alloc_buf, no vma
[ 1571.729199] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.741322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1571.752371] binder: 32522:32536 transaction failed 29189/-3, size 0-0 line 2973
[ 1571.756229] binder: 32522:32523 ioctl 40046207 0 returned -16
[ 1571.760060] binder: BINDER_SET_CONTEXT_MGR already set
05:52:23 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x100000000000000]}]}})

05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d302002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:23 executing program 1:
r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x40, 0x100)
r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x80fd, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x424f}, 0x1)
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1571.776405] binder: 32527:32538 ioctl 40046207 0 returned -16
[ 1571.787495] binder: 32522:32540 BC_FREE_BUFFER u0000000020001000 no match
[ 1571.798605] binder: send failed reply for transaction 792 to 32522:32523
[ 1571.815013] binder: undelivered TRANSACTION_COMPLETE
[ 1571.821608] binder: undelivered TRANSACTION_ERROR: 29189
05:52:23 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x600000000000000, 0x0})

05:52:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0)
ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000080)={0xf, {0x7, 0x0, 0x7, 0x5}, {0x7, 0x100000001, 0xff, 0x10000}, {0x1ff, 0x2000000000000000}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1571.875641] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1571.877555] binder: undelivered TRANSACTION_ERROR: 29189
[ 1571.910077] binder: BINDER_SET_CONTEXT_MGR already set
05:52:23 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1571.940965] binder: BINDER_SET_CONTEXT_MGR already set
[ 1571.951522] binder: 32543:32544 ioctl 40046207 0 returned -16
05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293502002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:23 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x3f000000]}]}})

[ 1571.989331] binder_alloc: 32543: binder_alloc_buf, no vma
[ 1571.989356] binder: 32550:32551 ioctl 40046207 0 returned -16
[ 1572.055006] binder: 32550:32555 transaction failed 29189/-3, size 0-0 line 2973
[ 1572.055628] binder: 32550:32551 BC_FREE_BUFFER u0000000020001000 no match
05:52:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xb)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
fcntl$getflags(r0, 0x401)

05:52:23 executing program 1:
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80)
getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r3 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x3ff, 0x100)
ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{}]})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

[ 1572.148850] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1572.170479] binder_alloc: binder_alloc_mmap_handler: 32550 20001000-20004000 already mapped failed -16
05:52:23 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cd02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:23 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7000000]}]}})

[ 1572.202679] binder: 32576:32577 ioctl c0306201 0 returned -14
[ 1572.227645] binder: BINDER_SET_CONTEXT_MGR already set
[ 1572.235358] binder: 32550:32551 ioctl 40046207 0 returned -16
[ 1572.241466] binder_alloc: 32576: binder_alloc_buf, no vma
[ 1572.242506] binder: BINDER_SET_CONTEXT_MGR already set
05:52:23 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000100)={0x4, 0x8000, 0x3, 0x400, 0x3ff, 0xb4c})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
write$USERIO_CMD_REGISTER(r1, &(0x7f0000000140)={0x0, 0x6}, 0x2)

[ 1572.249463] binder: 32550:32555 transaction failed 29189/-3, size 0-0 line 2973
[ 1572.253835] binder: 32576:32578 ioctl 40046207 0 returned -16
[ 1572.261409] binder: 32550:32555 BC_FREE_BUFFER u0000000020001000 no match
[ 1572.283648] binder: undelivered TRANSACTION_ERROR: 29189
05:52:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x9)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioprio_get$uid(0x3, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x101, 0x201)
ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x2, 0x9, 0xfffffffffffffffe, 0x1ff})
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={<r2=>0x0, 0x2, 0x8, 0x5, 0x5, 0x4, 0x5ff, 0x0, {0x0, @in6={{0xa, 0x4e20, 0x2, @mcast2, 0x3ff}}, 0x7, 0x1, 0x100, 0x80, 0xa269}}, &(0x7f0000000200)=0xb0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={r2, 0x5d, "1b1375cb3073890355ffd33e21305cecd5ad62f36811eecc88361c8251f049f3e9b23de9ad7e81d1028f07984d517bc35f2fe81fc5838367ce4b6550d101b99ac836e0821e9ded51d37e579f4fc4a5aadb336ef681b60a2c82b46461e9"}, &(0x7f00000002c0)=0x65)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={r0, 0x401, 0x28, "971312403ceb8a1d9a6f5a8dd8771fa941053e47da4ab8eeb6f91e5869ed3d5cb0ee63106233f01e9d814393544d1a5f3b621aabf35c6c8fec82b7e1165a198abd2c5487baf0ab54412e2584dd56999c535d2e671af123491826dbe4b641ce54fa2477229c35b9"})

05:52:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000740))
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

[ 1572.315724] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7a000000, 0x0})

05:52:24 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291a02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x700000000000000]}]}})

[ 1572.466708] binder: undelivered TRANSACTION_ERROR: 29189
[ 1572.523744] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1572.530072] binder: BINDER_SET_CONTEXT_MGR already set
05:52:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8)
getgroups(0x8, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0xee00, 0xee00, <r3=>0x0, 0xffffffffffffffff, 0xee01, 0xee01])
fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x7}, [{0x2, 0x1, r2}], {0x4, 0x2}, [{0x8, 0x2, r3}, {0x8, 0x5, r4}, {0x8, 0x4, r5}], {0x10, 0x7}, {0x20, 0x4}}, 0x44, 0x2)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x400, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f00000000c0))

05:52:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298d02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1572.567008] binder: 32603:32609 ioctl 40046207 0 returned -16
[ 1572.573737] binder: BINDER_SET_CONTEXT_MGR already set
[ 1572.590211] binder: 32610:32611 ioctl 40046207 0 returned -16
05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4000000]}]}})

05:52:24 executing program 4:
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7fffffff, 0x800)
r1 = getpid()
pipe(&(0x7f0000000340))
fstat(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000017c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x401000}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="181400002a00000228bd7000fddbdf251000000014006800ff02000000000000080000000000000134104f0008003000", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="000820554ab2d20b854bf1b04272000b58b3d017fa086186c88940edb1734be900822422d7d569349de05bcd5ca25909bde57a048fdd34cbdeef7c5cd0509d7f6d66a7be445a1bcf25ea864b38c5b02af0a07bd8ffc8b556", @ANYRES32=r3, @ANYBLOB="1498befdde5b7f61a3d8f8cc6a93bcd21aa1c98bb39140972b7225d5c4d8e89b56961ccb1922f2d93c8d904df4fc0e641a7b3746346d39ef0c278733ebf1eb0d509b7dd9b4568099919aa92eff595a564f65a5d7df1d74fd5ca9adfc7a73a3890a927a3d489aa99b2eae7b66628231227c98d9d6516dab367c02aba7decb18da953b45632ff1f9b3098528653c71f01cc191d88f30808c4eeae7d9045da1230f7fa901f365fe1c340499e0d26af225c7ba8124547902719a90f89ceffc0ed6332599ac7b75c8213d739bf4352cb65bcbe8b013c177f9a00c4631f52cb3ac7ac800"], 0x1418}, 0x1, 0x0, 0x0, 0x4}, 0x4000080)
r4 = socket$netlink(0x10, 0x3, 0x4200016)
writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)="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", 0x10a}], 0x1)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000000)=<r5=>0x0)
fcntl$getownex(r4, 0x10, &(0x7f00000001c0))
tee(r4, r4, 0xb5, 0x7)
kcmp(r5, r5, 0x7, r4, r4)

[ 1572.622612] binder: 32610:32615 transaction failed 29189/-22, size 0-0 line 2834
05:52:24 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=<r1=>0x0)
ptrace$getsig(0x4202, r1, 0x3, &(0x7f0000000040))

05:52:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294802002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1572.681224] binder: 32610:32611 BC_FREE_BUFFER u0000000020001000 no match
[ 1572.713656] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2000000]}]}})

[ 1572.740808] binder_alloc: binder_alloc_mmap_handler: 32610 20001000-20004000 already mapped failed -16
[ 1572.753822] binder: BINDER_SET_CONTEXT_MGR already set
[ 1572.773521] binder: 32627:32629 ioctl 40046207 0 returned -16
05:52:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000740))
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

[ 1572.798343] binder_alloc: 32627: binder_alloc_buf, no vma
[ 1572.839133] binder: 32610:32611 transaction failed 29189/-3, size 0-0 line 2973
[ 1572.858085] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:24 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x3000000, 0x0})

05:52:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29da01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:24 executing program 4:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x404502, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xfffffffffffffffe)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000100)={0xaa, "338e8c63f4c39ea3000f2bf26ef38ef56ef380b585ec9deb5e4c3831ee77fb442e9ede0d7c578294a0a7b759aa9cad0073cc6671697fd19ec037722aafd3191c0b72cfcedaa6aa2dc6040fc6902c2c9aff86b3eebb8d790b03c54dae1bd56b5f323c8cdd6510e29010a77a8bc737f8916747b1e25536606f08e3f4d55f36857fc88d23fc80fcbda7cb1d6bbc0776675c2b0178345e12363b4beaf225b04455d9e0d5bded257c61662c71"})
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x8ad, 0x20, 0x5, [], &(0x7f0000000080)=0x200})

05:52:24 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x400, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000740)=<r3=>0x0)
lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={<r6=>0x0, r0, 0x0, 0xd, &(0x7f0000000900)='/dev/binder#\x00'}, 0x30)
r7 = geteuid()
getgroups(0x4, &(0x7f0000000980)=[0xffffffffffffffff, <r8=>0x0, 0xee01, 0xffffffffffffffff])
sendmsg$unix(r2, &(0x7f0000000a40)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000280)="61e20e23e5f4f054bcb3539fd29cb46f33a63c0c8b51a359a26e5617f56945fb6e34678a0e00e5d467a8b7ed8dc8f1865ed48df101a93df01547d0b890eb5d2d97b0b7d06f730a14668832a20151080ac38ff616ee9a2053af08eaedae773138030f049e6bc8e57d766d79fb7b604ade5beca6e3eabba79c7c13fa8690c8965fea326aad0634156e52a79fd66405f723bc71b90caccea8b3985b8ce10c69a01b4834cdc6edaceba66647ccd3cf6ad02959eaf70b110b074e1443a0", 0xbb}, {&(0x7f0000000340)="8afa7068aa55d2cfb02d7c30218995f52700fbe4884bca308062c867476620962d431ce9141311fe19349e897e965d99c21ade5ad77dc83da646ad43001c055e788ba547eb40f3d2f561fde9f3057f916f92b14bc24748aeb847247b0f8ac96de38b3303b0098e6a41632051a1c6fdd7db94269d00f8112216a6963b15597b9f37cb5bb22c3cd90c6ccad1a0ef07d75e3911b047760479776a38fcc6b9db4e2f6cd7dc69e57fae8ad5353b522febebb3f98e5471689ab9b6ad5b159019a28329f0fb", 0xc2}, {0x0}, {&(0x7f0000000440)="8f18b89ad88cb92c0f5936acc09138d14040e87bc01d187dd01818b881e74ec7feb96ad37b4564a890a49376b0a74e52efb5a418afebad8a04df086e44429aa24ffe91e42d04eb59afd73c02c6825aaa92a6388af8144e594dd3aa518c5ad9b64221b225f3f1a3a47eb7da25e274cdf1c0a2a14ee070f0ff0cc15358705b7162f5c05a26ca9b5b6be8ed9042749af0a3dcb9767c2dd9eff9401680b3dde23ec8648feb93015048bf0b85313e9854b57fb873df1d58", 0xb5}, {&(0x7f0000000500)="1508649acf41a618db91fea9b469d91871cf7159d83f4723e87c7933235bfd1375199bf3bf6b5cf86acb26eb4f658c78029fa07e187670d051e377a3916a245530ae68c2bcfc769b9e8b1503cc7ea76a75b04ed0c6559157f37f2dff6b901ca5893df1e7639000acdc55a771ae621f6985dadca8ae98d6e9e8526972be69f4dcd9c9a7a37a4f1317376d2c1292ab", 0x8e}, {&(0x7f00000005c0)="e33af514282c564aeb7ba4dfb494b3f00fc26e6c73898fc001f8e02ace79545071901c0b9807a85ff5ba0eb1d4fd0c4499ff0ef2a96279dd6609e81ab3405acf361b3d507c6d7d6a44d49dc6d14f1df5e25df8ecca6cbf530936a79db66fe4204011643c29ad6e49c75852db6771dfed4fa11a52ab66b398ec12689cee5a905030e7bf714c0ae4bf213e41aad06e3790fd74b844193219194a7a632729db8f8307cbe6b606b40bb0b2f0a2fbd92ff95b8dd2a42e2105db11b504c8445868fb30c5d505c3b40d98b14521511926f946a2400c00fc03", 0xd5}], 0x6, &(0x7f00000009c0)=[@rights={0x18, 0x1, 0x1, [r1, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x58, 0x80}, 0x4000)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000040)={<r10=>0x0}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f00000000c0)={r10, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}}, &(0x7f0000000180)=0x84)

05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x500000000000000]}]}})

[ 1573.024004] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.036356] binder: 32659:32661 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1573.049055] binder_alloc: binder_alloc_mmap_handler: 32659 20001000-20004000 already mapped failed -16
[ 1573.049681] binder: BINDER_SET_CONTEXT_MGR already set
05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x300000000000000]}]}})

05:52:24 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="9568bbedcc6b334339fe22963ee4a40b93f321c3b30ddd0be0359661fe2b650909fd82611e6fd461e64b72108d1030c3a04f5b8fb79b455136516edb6297e0d68213ab0060506c4ca07a82cf7b79850932b78d2a51b49a1952c0ce6a546b0fd41a800c8a43f8592d3b7e73d03440d8f363a2bd60247205f903fca862467065f2ab3cf35c1dc58e843223a533d510d52d8e6584d022c0275ade6eb77275d55790b3ab3efe78f5097e800cb650beecd1a50cdd10d220c8d154a534994fa048e699414086c409c72db3d37fcae684eea47384e8c6b1708fdace911ff4447afbf627e46520ae9e68"}], 0x1000000000000178)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x200000)
ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000280)={0xffffffffffffffff, 0x5})
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000380)={0x0, 0x8, 0xfa00, {0x4, &(0x7f0000000340)={<r2=>0xffffffffffffffff}, 0x117, 0x200000000000000}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000300)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
getsockname$unix(r1, &(0x7f0000000200), &(0x7f0000000080)=0x6e)

05:52:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293a02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1573.090237] binder: BINDER_SET_CONTEXT_MGR already set
[ 1573.096762] binder: 32658:32662 ioctl 40046207 0 returned -16
[ 1573.136640] binder: 32659:32661 ioctl 40046207 0 returned -16
[ 1573.136696] binder_alloc: 32659: binder_alloc_buf, no vma
[ 1573.149124] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.150106] binder: send failed reply for transaction 804 to 32659:32661
05:52:24 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000740))
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40})

05:52:24 executing program 4:
socketpair(0x5, 0x6, 0x800, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000080)={<r2=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0xbe, 0xe5d, 0xfffffffffffffff9, 0x80, 0x80000000}, &(0x7f0000000140)=0x98)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x997f, 0x1000000}, 0x8)
r3 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000500)={0xffffffffffffff00, <r7=>0x0, 0x0, 0x7ff})
ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000540)={0x10000, r7})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, <r8=>0x0}, &(0x7f00000003c0)=0xc)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
setgroups(0x5, &(0x7f00000004c0)=[r4, r5, r6, r8, r9])
writev(r3, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:24 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4c000000]}]}})

05:52:25 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x200001)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0x20, 0xff}, 'port1\x00', 0x8, 0xc, 0x0, 0x8, 0x80000000, 0x2f4d, 0x81, 0x0, 0x4, 0xffffffff7fffffff})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000200)=""/67)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
clock_nanosleep(0x1, 0x1, &(0x7f0000000140)={r2, r3+30000000}, &(0x7f0000000180))
setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000001c0)={0x0, 0x2710}, 0x10)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/current\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x500, 0x0})

[ 1573.256607] binder: undelivered TRANSACTION_COMPLETE
[ 1573.321280] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.351123] binder: 32690:32691 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cb02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1573.387046] binder: BINDER_SET_CONTEXT_MGR already set
05:52:25 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6c000000]}]}})

[ 1573.411050] binder: 32694:32697 ioctl 40046207 0 returned -16
[ 1573.435566] binder_alloc: binder_alloc_mmap_handler: 32690 20001000-20004000 already mapped failed -16
[ 1573.455563] binder: BINDER_SET_CONTEXT_MGR already set
05:52:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x12)
writev(r0, &(0x7f0000000040), 0xe1c1510064a29f6b)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r1 = accept(r0, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14)

05:52:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f400002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1573.465879] binder_alloc: 32690: binder_alloc_buf, no vma
[ 1573.484177] binder: 32690:32691 ioctl 40046207 0 returned -16
[ 1573.503809] binder: send failed reply for transaction 808 to 32690:32691
05:52:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x300000000000000, 0x0})

[ 1573.514107] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.522348] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.541019] binder: undelivered TRANSACTION_COMPLETE
05:52:25 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6000000]}]}})

05:52:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cd01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x28000000000000)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000280)="25cc6d13a93958c4a7f5de3f65aefaef9826571dd5212d48cee78ce99087cc862e713d7f71"}, {&(0x7f0000000240)="2389c4b9efecea91ecf13bb3fef6a6a08c5ec5b6057125b12cc8c7fe898357d2816fb07280", 0xfffffffffffffec9}], 0x100002b7)
r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000080)={0x0, 0x1, [], @raw_data=[0x5, 0x6ee2, 0x7fffffff, 0x2, 0xffffffff, 0x40, 0xfffffffffffffff8, 0x7, 0x80000000, 0x4, 0x2, 0x6, 0x7, 0x9, 0x8, 0xffff, 0x40, 0x7551, 0x9fd739f, 0x67d, 0x4d, 0x9, 0x6, 0x81, 0x2, 0x3, 0x200, 0x6, 0x6, 0x401, 0x1, 0xfffffffffffffffd]})
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000140)=""/49)

[ 1573.634962] binder: 32717:32718 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1573.661616] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.730859] binder_alloc: binder_alloc_mmap_handler: 32717 20001000-20004000 already mapped failed -16
[ 1573.776801] binder: BINDER_SET_CONTEXT_MGR already set
05:52:25 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x3f00]}]}})

[ 1573.808502] binder: 32717:32718 ioctl 40046207 0 returned -16
[ 1573.808698] binder_alloc: 32717: binder_alloc_buf, no vma
[ 1573.876675] binder: release 32717:32718 transaction 811 out, still active
[ 1573.886141] binder: undelivered TRANSACTION_COMPLETE
[ 1573.891793] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1573.907188] binder: send failed reply for transaction 811, target dead
05:52:25 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x11, r0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x1370)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0x0, 0x3, {0x54, 0x0, 0x4, {0xfffffffffffffffb, 0x1}, {0x92d1, 0xffffffffffffa954}, @ramp={0x1, 0x5, {0x1, 0x7, 0x84, 0x471}}}, {0x57, 0x66f, 0x1000, {0x2, 0x1}, {0xaa, 0x2}, @period={0x5e, 0x0, 0x7, 0x1, 0x6, {0x0, 0x8, 0x100}, 0x2, &(0x7f0000000000)=[0x40, 0x8]}}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xf1, 0x100)
syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x40)
r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x101000)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000140)={0x7, {0x401, 0x0, 0x8, 0x6}})

05:52:25 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cd00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:25 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4)
r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x80000000, 0x400080)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080))

05:52:25 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7a00000000000000, 0x0})

05:52:25 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4c00]}]}})

05:52:25 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1574.272470] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1574.302895] binder: 32752:32758 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1574.310040] binder: BINDER_SET_CONTEXT_MGR already set
05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290159002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="290000402000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b050000008bd3e9f86c18af2fd284798b3564e8500d041a810be206f09b7a1538dd72654753d096847cc99bdc6446171886052962011a18149e833c42f40ab97a8b6097ed53624f0ae9086eee40dcd5583c851a8d70a360a005d1790a0d2c45d3acf95f8d4c75a69a1c8587609bf16ff997bb9b025050fbaec61f592e5d1556784e03ae156a73cd5a80cf2017f3b4c0feeaecaa28ae5e8e481c92ee326013e10334f832", 0xc8}], 0x1)

05:52:26 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6c00000000000000]}]}})

[ 1574.342748] binder_alloc: binder_alloc_mmap_handler: 32752 20001000-20004000 already mapped failed -16
[ 1574.374504] binder: 32756:32762 ioctl 40046207 0 returned -16
[ 1574.376402] binder: 32756:300 ioctl c0306201 0 returned -14
[ 1574.387749] binder: BINDER_SET_CONTEXT_MGR already set
[ 1574.413955] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1574.421368] binder: 32752:32758 ioctl 40046207 0 returned -16
[ 1574.422208] binder: 32756:32762 ioctl 406855c9 20000040 returned -22
[ 1574.459732] binder: BINDER_SET_CONTEXT_MGR already set
05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902bd002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:26 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0xffffff7f00000000]}]}})

05:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x1)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1574.482851] binder_thread_write: 4 callbacks suppressed
[ 1574.482862] binder: 32752:32765 BC_FREE_BUFFER u0000000020001000 no match
[ 1574.497491] binder: 32756:300 ioctl 40046207 0 returned -16
[ 1574.503985] binder: 32756:32762 ioctl c0306201 0 returned -14
[ 1574.505601] binder: send failed reply for transaction 815 to 32752:32758
[ 1574.510895] binder: 32756:310 ioctl 406855c9 20000040 returned -22
[ 1574.523350] binder: undelivered TRANSACTION_COMPLETE
[ 1574.586575] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:26 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6800000000000000, 0x0})

05:52:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29012a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:26 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4c00000000000000]}]}})

05:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
uname(&(0x7f0000000080)=""/161)

[ 1574.752971] binder: 329:332 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1574.785344] binder: BINDER_SET_CONTEXT_MGR already set
[ 1574.791525] binder: 334:335 ioctl 40046207 0 returned -16
05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29000f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1574.827648] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1574.841345] binder_alloc: binder_alloc_mmap_handler: 329 20001000-20004000 already mapped failed -16
[ 1574.841890] binder: 334:345 ioctl c0306201 0 returned -14
05:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x16)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'team_slave_0\x00', {0x2, 0x4e22, @loopback}})
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="592fe3dfdf718f357f964d23fb2432491a426bdbcf52c0bc6f408f9cb81daef584d712106a8b4682f2ff1efeee8aa62d95c2276ba58ce77bdf56c93b7e98355d1b7ad5b62b37846d5b48c2a069933e15748ff165ff87a9b912d01dfaf53581d40407bf722257b46630ebe4c266dabad9eada00c09b27305287eb272b043fde4067b8a937dff755a2e37055399684e2671b9befd868b840c1727a4e0e4992f2b809c0bbccf763e7b5bb", 0xa9}, {&(0x7f0000000140)="4f1d93d3b5e8fd410527aab48a12a371eb4bf0bd8b26d913c7b79e127b8334bfb558da4d7d667c5086e23194a8770665f4b3043f081485ad59d8c492222776ed8acd0050a13864e3e95b10b7ca", 0xfffffe5d}], 0x2)

[ 1574.885758] binder: BINDER_SET_CONTEXT_MGR already set
05:52:26 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x3f00000000000000]}]}})

[ 1574.906138] binder: 329:332 ioctl 40046207 0 returned -16
[ 1574.912034] binder: BINDER_SET_CONTEXT_MGR already set
[ 1574.926603] binder: 334:335 ioctl 40046207 0 returned -16
[ 1574.978154] binder_transaction: 4 callbacks suppressed
[ 1574.978171] binder: 329:355 transaction failed 29189/-3, size 0-0 line 2973
[ 1575.012307] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:26 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200100, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@timestamp, @sack_perm], 0x2)
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1015)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080))

05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290052002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:26 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1575.023769] binder: 329:344 BC_FREE_BUFFER u0000000020001000 no match
05:52:26 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000140)=[{}, {&(0x7f0000000080)="8d3e2138830035ef77b96d08fa5003dfe70eaf0e9c6cec44a2502c1537713f55b476dd24e23e49d88d158a2c1edb473e0ec2b012f80cf4251fb24a444ffe6dc7b388423ab7c329cae0688fea1eeb2f3d244e2c705703ed87341cd27a95f13fcc147549b7acc1c63a12723e624eb0886e9c292a64c2656432d4b292d50cd128512b", 0x81}], 0x2}, 0x6a7b}, {{&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x3, 0x7fff, 0x0, {0xa, 0x4e20, 0x9f, @empty, 0x5}}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000200)="558a1792b0820f417543c1f416cbc7cddbfac9e4929e14dd17f28c0b51cafc88e0afa882", 0x24}, {&(0x7f0000000240)="2f9f87eb784c5a9245b035854af6492cb6a89dbc2d5d869779ec690d73f84070757e14718bb7efd4daf2f7793a541f5feb62a03eb6bc6406027c201b690c5d1d9fa1c99323617bf6c113c5eee79765673ce7bf1cdd826473fcb81887cae471d5", 0x60}, {&(0x7f00000002c0)="5ec46cf2ef37fc96708424be33d86cf783ac356edb1accd51071e7fe49b1623d767d418f174018d40922b96448d4880e4917b773edc44103e3a00416ae2bb2d7d88cf23da07abbd3f6d53f374235e5b993256f8fe2fb2fe67183c09bc7e0e44d97f5c92bb644d9e7c2cfa9adbd59d76f058ee5480c9d4b3423ced6d00952a32055e1276cd5d0aa02e3ef5743a536b863cd8ef5676cff31bfe425f44a68563d24c7f8708b34694110df64b23ecfa907becd22a1bbc4c97c6cab253a752d21fc4cb9f2127ca0f6b7e0aaf7207cb8165404c78d54d4e6dbf0665fabd1", 0xdb}, {&(0x7f00000003c0)="32bbe5660d8a9c0944a184b030d65e86758460455c78484d67ed2b0194b8c0e2fdf1eb595ab9e5013bda500bca1a604db355e458146fd1d645aca50df11103d528980dba1e74c39090a9faf2af31d7d7c6ec6a945988cd2603c8e7022ead8a6887d3529816253aa04c843e9b632ee08e9441c2f778227bc4c8e7434ed82cbf7752b7332817ae5cf771799d1e4587d6da5222b0e5a6519a526e044b84340de0920c694412600e9a371833f8770b8834d2e29c20da78e06cdbcf1d5a65767b631079c03f8abc0999116c8ed6cb61c28b440e7dfd35228e8a0965581b7aa787e17efa3ec9c8b1d88aa9656912e786", 0xed}, {&(0x7f00000004c0)="822a6ee7bfcea1f680ce735b792fbe2e5a15f9de591ba1c1d6ba4af249e66545e0bec6363009127cb8ec24152b9106fd0e61fcaca0eebef882ec38214ac16e697fba1f49e0f133d26a494d484b3a90df6125e09b48e94ac3cebee6f92c50fd6676674ec91e247640b0ac13064fccd078a05a10cc10504ae1ebf1b07e6896ea7228a3b0d4fc8922f3b9d44e220d3928c86af3062ee96859785b386c680c0c042b6ed5646896f3c928cc81ea851c8f383817c9a0f174be92b226772605e97de268a05581fc854ed2db3bfcd3fd8db9b4e7a9bb291318185a27aec6f3999db9b048c90ce6af1a9f05", 0xe7}], 0x5, &(0x7f0000000640)=[{0x88, 0x109, 0x9, "c761d8d264f02728c52764e1b8ed00cdaf10be75d5de8837e9b78f67b508d70b9554949f4bf964beca9e1f65769128a4ee45c51bd381badf3f3db23ca36aa8b637c26573538d9751d653fa3a0ebcdb849d6865b83b652e11729778e26bb539ac32c580e7ebb315406dc40350e4e329b235702e"}, {0x1010, 0x100, 0x3ff, "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"}], 0x1098, 0x4040014}, 0x7}, {{&(0x7f0000001700)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001780)="aefd1b512e435f322ec8f453100ddc33a2ebf11cc965108a7fe734f64d48fe572bbdfaf80157b9f6faffb812038f77ec86ee118533b832e4b7b3cb6f7efbd06334de4fb398f4de8d81515c2667b8c47ebb6e43a7cc5af6f5b03cacb7952689a757a5bfc2bb25e72fc0cc9dd25b96e859e588b83c16bed22bbcddd1623f2252ea251b38d55d0a025a94bc5bca4b21f7", 0x8f}, {&(0x7f0000001840)="c508a7992a9585db9e227749b27c0783a3b01a4bbe167bb4395ec447bdfe46967ce51101cb459a2fda8a0f0b4f4e9506e93a26a4d8dae73909496a0ecbcb0c76ad7df4763b4f35c0084008c973c744f3341c4b70fcd793a822e1185dc9df3ed9e2707ecd3a68f136e6c8a6f95ea89ab7c10b896621dbe88340ba55436a2e67c518e175c5fcb0ad7aea675b452d0c66fe1988009c88b51692e7a5b00b129b53fd64e8e95877da2baf3d66ef5698a0c5ab157f959f670c", 0xb6}, {&(0x7f0000001900)="d162040a3475c91a61d6f3a3b6450c9ff73fe3833bc389716778a306170689778829b5a881df466e20f80832724002f76fc2bd708f3d3a834c98602b73d418888c36a33351d71a8258ee31c4c72caf3d1a6ce056024dde990b29445e18aba17bcc2407b63167565962dde7fc660e7bcfeb66f0565e16f0d5e863d0bf55e77a9c5ab94dea9ba53bb2f793af0ccfd7be0927415436eb193416336566cbe53fc6adeca647e10a0f15938a430dfdeb09611118563a750ceec6991790912bd62736f7b3c87dd76bce6ab1e96d92d5b295d9f1b124e8f7babad6465e2e09973732d0d359db74f663042bf3f0f3", 0xea}, {&(0x7f0000001a00)="d87160446a9de8c0d2a0d94dac20d6c295a18fd9a204f4ac6565e5a37c70da3a4c", 0x21}, {&(0x7f0000001a40)="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", 0xfd}, {&(0x7f0000001b40)="d200ad8e6327706f0a9d4cc3be8da22241a566fb7d4a71900ea2e6d34b69a1bbf531297c23413ca6d7553f4318e6e031d0e2c361d0a4", 0x36}, {&(0x7f0000001b80)="ef8c2adcaf5f045198d96fa293ce55566cd6dbc01171ea0b913b7c314988a40ef0840351b8801588556d229ae1f7ff096b374098cce081c69a2f8e544548111dba3757bf2a1b10e8f2de88766a1ac44cd2a9d094bb45137fb05d0f293936ff41c75d3650c94df5369f3b16fb3cea67032ca8a8f23caa0e2ceb8b2b3ee715a395d16831f46f2e26c7b7714fac7853107bd8b1be40a25d7a54a8b372a824b037879a15457bf6c664aff6dbcd38479bb8a1a04e9794a526b72204594a51ebc28a4c5ddc4177db13a9b3", 0xc8}, {&(0x7f0000001c80)="ee34cca1e947bcb1fef02e33b4a96b7cf91510de02df50e19caf3fc70a396020d1c4a8a099a6da18a41ec27d30eb952da8173130065a7617b4792a4aceb9a29602aaf26e499fb121cc6b88010945443ed488374ac630a623c38d0fab229f4a6c0c4c932eda34c1023db167", 0x6b}], 0x8}, 0x68}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001d80)="b0a9d46e6e6893b5c0c21ce7a94fd4251a4991e95dd736211f8f91b6d1701dc2cc1986198c36f75383cc000c75c0266e1f2795b0aba682a24f873e3bfd004b4d9cbcdbf9625357fb9d69ac8d9bdd429ab07511f3581dd864fa467654e4771d7eda868cb86a50b934b2cd913ca178044b0f9d78137ead750669499ef10f757dcb5b11e6ece7fe1799978c6fd67d8437b1", 0x90}, {&(0x7f0000001e40)="d2e4d59bdfe4fdc00ec2b3c0f7ed4b8016dd349ded9e24709c3c80c00affb7bf3d918824ff7d0af273d153b5fae5cc6b27ec65ef5791213e713f1207f2cc7f4be03d4b13030d54d267ab9d36a15a02b6d4a86645f841e812f465b165af5151889bc7b77edda1d1c0080d6cdf6d5cb65b1b9ed514e5f319c8790a1c5b4a60936c353f122bbb7eaf4e47c358afd876b223018cf1a58c778c666d76e2e107ce5e55024bd6bf9b627450045e2d403bf67594b84a8d9e82abbbbe7ed4c9e1cd1336eb6a4da79b681958a0034dc6f95282a2549969c2389db1cdf047e9a0bc30fe8be39ce1a486b875792ac88d6ac5", 0xec}], 0x2, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x1c8, 0x10}, 0x7ff}, {{&(0x7f0000002180)=@ipx={0x4, 0xfff, 0xb9, "0970798e750b", 0x8}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002200)="c9b18ffea46f9d7bd45bb8105537bb25e31de46cfe9cdc0b797d02a103fa62c6be1518a3162c5ce592b0faa49a0d31e79f87f04792745a7ed679e4cec9efcf5ab5d0aa10d31408a322c7a5b828fcacf3333e8ea601eae309c5df4355785e0a052723874a92f472f1e218fa34b39ce177a575300eca30ab10cdce02", 0x7b}, {&(0x7f0000002280)="000699c21accd1c8ea221885f3b41f113a1d1b1501", 0x15}, {&(0x7f00000022c0)="a028fab58f67b67e45c29dcf3501b516abb9622db1394861de50b5c9da4e4c411f4f8220d4a8bc75dae678073c1c566f2bfb83f4c3f4a5cf43ff4fbfe90f172eb28863a9a9ea18e71cf7e51a", 0x4c}, {&(0x7f0000002340)="ffd966ff5beca8d9b3273f21ca5f5d3e3f088b11592dac2bc36ece905c76fcd9aeed546a0e4c6ff07e1b3bc652754605e85beb0bb5893c58fb50d55be654cd7197a1fa6dea903282b4db1ebe20eb2dcc067e04181ce0ff9627379f90619787b080eaf1b42a", 0x65}], 0x4, &(0x7f0000002400)=[{0x30, 0x118, 0xfffffffffffffffa, "e95116c19213bb7394988d116f045d1519490f3364408cfa1f91d994272eeb21"}, {0x28, 0x184, 0x3, "480906d4b621966d57b61fd93618661df8ac29b92c32"}, {0x70, 0x0, 0x0, "1a7b83a67a717c1e8a359cef1951cfe024298dc2d9087ccaf6241d1c3423b69e1f0c5284e3e426c45e4eef2714360df08a4128fbe3966a0aecf449377b4e46d55d737a80d635c64dddadcab7b055b0ad8aa7343561b287c9d392133a9368"}, {0x90, 0x11f, 0x6, "cc1ba8e895d38f0887b7d85710e73aaf9605a724abfe4129549e4e85abdba8c0b26b21b4d0ce359eba838579807af7da03bd6774af5ee8073a36dee3a1b05777b3da06e9a900db26fdbc3f2091f8ebdd7256092615dadc05a457b2f444092716cacee056b17cfa0f0ce0698f974cb0365fa253b935a97cab538ad0b4656f"}, {0x68, 0x119, 0x7fff, "8c9b7b3b20a6ee34ece9102dccc0315c4ffa99bff41ffacf8d4becc07c6e8a84365c62dfaefbfa1e79f3676ebb8234caea95c42ad8b9feabc92bce2ed68330f3b2f4c7a54205281bd0d00a5613f0e606aeeffe"}, {0x110, 0x10b, 0x8, "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"}, {0x70, 0x11f, 0x6, "e0b7389d1dbab179357e9acc5417a8704d36535ce50ad898290e98cf823dd4874061f14e686ae20c569f2ab4f2aa31faebc90e1dbe48401d135ccd20d953570e8e2f8dcc7390dd1f7d71fd80109076cfe9fc511bb459667f5d"}, {0x90, 0x107, 0x1, "cfb60a760a4d2a9de30b3d69d528846cac4220916a8cfee002b23dcebab474803c86ee98528ef8eb33cf740b72a404f02c275b50700281f052af7170c328118090b4319927bd22b8982e12b6c2ab92ca9b88e401a234e2f6b82a685aa74fea3eb4d55fb78dd2f6a191ea40e4156c68a643133b19f6c526c28eaf4e59"}], 0x3d0, 0x40000}, 0x9}], 0x5, 0x877b2cd29039c3ca)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1575.070198] binder: send failed reply for transaction 818 to 329:332
[ 1575.096695] binder_release_work: 9 callbacks suppressed
[ 1575.096703] binder: undelivered TRANSACTION_ERROR: 29189
[ 1575.113987] binder: BINDER_SET_CONTEXT_MGR already set
05:52:26 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x5000000, 0x0})

05:52:26 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901ca002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:26 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x68000000]}]}})

[ 1575.163055] binder: 366:367 ioctl 40046207 0 returned -16
[ 1575.171944] binder: undelivered TRANSACTION_COMPLETE
[ 1575.185311] binder: undelivered TRANSACTION_ERROR: 29189
05:52:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:27 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000cc0)='/dev/midi#\x00', 0x10001, 0x100)
ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000d00))
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0)
r3 = fcntl$getown(r1, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r4=>0x0)
r5 = fcntl$getown(r1, 0x9)
r6 = fcntl$getown(r1, 0x9)
r7 = fcntl$getown(r1, 0x9)
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000400)=<r8=>0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}}}, &(0x7f0000000540)=0xe8)
getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r10=>0x0)
r11 = gettid()
fstat(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
r13 = getgid()
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000006c0)=<r14=>0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, <r16=>0x0}, &(0x7f0000000880)=0xc)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000008c0)={<r17=>0x0}, &(0x7f0000000900)=0xc)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@ipv4={[], [], @dev}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r18=>0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000a40)=0xe8)
stat(&(0x7f0000000a80)='.\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
sendmsg$netlink(r2, &(0x7f0000000c80)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000000c0)={0xcc, 0x20, 0x302, 0x70bd29, 0x25dfdbfe, "", [@typed={0x8, 0x63, @pid=r3}, @typed={0x8, 0x2a, @pid=r4}, @typed={0x14, 0xf, @ipv6=@remote}, @nested={0x88, 0x56, [@generic="a5c3425e0cc7c4abd08b585d0a4411db4ce6a3b5a130547f328ee10c39cd1b83", @typed={0x8, 0x4c, @u32=0xffff}, @generic="b9fbb77f5bf80aab4b9f058981372607ada5", @generic="06ea5186094eafeaf75c935393e5370c21872705689538a34b6e1f3020df05be7152e94ba14700ed1ff8a93289ac1aa3f7db2f06c53adf25ec46371fa8a7f32695a5244757015b03"]}, @typed={0x8, 0x6a, @pid=r5}, @nested={0x8, 0x50, [@generic="6d3f984b"]}]}, 0xcc}, {&(0x7f00000001c0)={0x1ec, 0x29, 0x20, 0x70bd26, 0x25dfdbff, "", [@generic="9939f84be3f7268dbb1218f617b9956c5c5f4afbc112b8d00ad627df08cb9a39078d9b8b2b037dd97798dca09c9e51529c908037629bc84e912b427387ce29895b90f0e30f95bbb3197dc1dea6e914", @typed={0x4, 0x1a}, @generic="4d9a62bc9c9f9a5bf70fbef6dc3533eaf8b8f184338dbcab15c01c13159d0d7916d7ca352c7f3c6860c4744bd8e1a824b09c61220d0988ae261c596f250d", @nested={0x148, 0x2a, [@typed={0x14, 0x54, @ipv6=@mcast2}, @generic="5ffff62e497e867b35f7013c450c732468129970b39c062cc34fec1e20463951630fffc7dfcaa7b577bc76b5c819208716cc6b9a640407a5641d66f33c", @typed={0x8, 0x13, @pid=r6}, @typed={0x8, 0x7e, @pid=r7}, @generic="56dda9058d685b1dd60c3af4ce02e7b5204f27d976d5779e4a4f9e62684771f9de0af5e0126d2e9ea6900790b21e91ce31e68c1ceac9f2c768f7f877440ddb8d8c2a6b2f6ff3f788336130998f661dd212d38e1c76b42f4072eb846e1dc39e9acd60bb7d06b0c81f16baa44aa626185673a2fadaffcd482804308ca117f86ff86edd482f256f44d7303eb368c177ad09b0", @typed={0x50, 0x8f, @binary="324b4071a74891a31084e557f8d7546f71be39167e5227542ad21a3b8182736b1320ca998be1779ded8d3612ffd6167dd98ce448460ce867f1ad1e0df41a01363850a8f5d1290bb6ed5247"}]}]}, 0x1ec}], 0x2, &(0x7f0000000b40)=[@rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r1, r1]}], 0x118, 0x40000}, 0x20000000)
r20 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000d40))
ioctl$BINDER_SET_CONTEXT_MGR(r20, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1575.282196] binder: 383:384 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1575.297484] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0)
ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0x5, 0x7})
writev(r0, &(0x7f00000000c0), 0x1)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
getpeername$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c)

05:52:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29010d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:27 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0xfecaedfe]}]}})

[ 1575.375933] binder: BINDER_SET_CONTEXT_MGR already set
05:52:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x6)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x105000)
ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x6)

[ 1575.421035] binder: BINDER_SET_CONTEXT_MGR already set
[ 1575.427389] binder: 383:384 ioctl 40046207 0 returned -16
[ 1575.427553] binder: 383:403 BC_FREE_BUFFER u0000000020001000 no match
[ 1575.438231] binder: 393:397 ioctl 40046207 0 returned -16
[ 1575.446866] binder: 383:395 transaction failed 29189/-3, size 0-0 line 2973
05:52:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29005f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1575.515144] binder: release 383:384 transaction 822 out, still active
[ 1575.527909] binder: undelivered TRANSACTION_COMPLETE
05:52:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
eventfd(0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1575.577580] binder: send failed reply for transaction 822, target dead
[ 1575.586395] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x1000000, 0x0})

05:52:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x101000, 0x0)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x1)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), 0x4)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x100)

05:52:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901ef002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, 0x0, 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:27 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x500]}]}})

[ 1575.618685] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1575.620366] binder: undelivered TRANSACTION_ERROR: 29189
[ 1575.745412] binder: 424:425 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1575.768355] binder: BINDER_SET_CONTEXT_MGR already set
[ 1575.784498] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1575.795825] binder: 422:434 ioctl 40046207 0 returned -16
[ 1575.828052] binder: BINDER_SET_CONTEXT_MGR already set
05:52:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290177002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x1f)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:27 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x700]}]}})

05:52:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, 0x0, 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1575.843842] binder: 422:434 ioctl 40046207 0 returned -16
[ 1575.849948] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1575.849966] binder_alloc: binder_alloc_mmap_handler: 424 20001000-20004000 already mapped failed -16
[ 1575.873463] binder: BINDER_SET_CONTEXT_MGR already set
[ 1575.880720] binder_alloc_new_buf_locked: 3 callbacks suppressed
[ 1575.880727] binder_alloc: 424: binder_alloc_buf, no vma
05:52:27 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000))
r1 = syz_open_dev$binder(0x0, 0x0, 0x400000000000000)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1575.892466] binder: 424:425 ioctl 40046207 0 returned -16
[ 1575.932683] binder: 424:456 BC_FREE_BUFFER u0000000020001000 no match
[ 1575.951202] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1575.965204] binder: 448:462 ioctl 894b 20000000 returned -22
[ 1575.997719] binder: send failed reply for transaction 825 to 424:425
[ 1576.010031] binder: 424:445 transaction failed 29189/-3, size 0-0 line 2973
[ 1576.035262] binder: undelivered TRANSACTION_ERROR: 29189
05:52:27 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290109002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1576.048510] binder: 448:462 ioctl 894b 20000000 returned -22
05:52:27 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x9, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:27 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7a00, 0x0})

05:52:27 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x5]}]}})

05:52:27 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, 0x0, 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:27 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x2000)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1576.092481] binder: undelivered TRANSACTION_COMPLETE
[ 1576.097937] binder: undelivered TRANSACTION_ERROR: 29189
[ 1576.157415] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1576.214153] binder: 473:485 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1576.245263] binder: BINDER_SET_CONTEXT_MGR already set
05:52:28 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x3000000]}]}})

05:52:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296701002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:28 executing program 4:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000003c0)=<r0=>0x0)
prlimit64(r0, 0x0, &(0x7f0000000400)={0x3635, 0x7}, &(0x7f0000000440))
r1 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x3, &(0x7f0000000500)=[{0x4df, 0x7fff, 0x81, 0x1e}, {0x4, 0x10000, 0xffffffffffffffff, 0x4}, {0x0, 0x105, 0x80000001, 0x20}]})
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x400000, 0x0)
ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000380))
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x38040)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={<r4=>0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x12}, 0x6}}, 0x800, 0x1}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={r4, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}}, [0x6, 0xfffffffeffffffff, 0x100000001, 0x79, 0xad, 0x2, 0x7, 0x4883, 0xc635, 0x6, 0x7fffffff, 0x101, 0xa119, 0x400, 0x8ca]}, &(0x7f0000000280)=0x100)

05:52:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0), 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1576.262376] binder: 487:488 ioctl 40046207 0 returned -16
[ 1576.278186] binder_alloc: binder_alloc_mmap_handler: 473 20001000-20004000 already mapped failed -16
[ 1576.283489] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.333157] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.346308] binder: 487:490 ioctl 40046207 0 returned -16
[ 1576.356928] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299f02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:28 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6c00]}]}})

05:52:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x18)
bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @empty}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00')
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={<r2=>0x0, 0xf, "eb4ffa8704246947c6b42ea3a96dd6"}, &(0x7f0000000280)=0x17)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r2, 0x0, 0x6, 0x8001, 0x8, 0x1}, 0x14)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={<r4=>0x0, 0x88, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x3}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e23, 0x9, @remote, 0x3f}, @in6={0xa, 0x4e21, 0x3, @mcast2, 0x6}, @in={0x2, 0x4e21, @rand_addr=0xffffffffffff0000}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000001c0)=0x10)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000200)={r4, 0x92, 0x7, 0x80000000, 0x9, 0x1}, 0x14)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x5c0, [0x0, 0x20000380, 0x20000530, 0x200006c8], 0x0, &(0x7f0000000340), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x8, 0xc, 'syz_tun\x00', 'ip6gre0\x00', 'vlan0\x00', 'gre0\x00', @random="da5ac8734820", [0xff, 0xff, 0x0, 0x0, 0xff], @dev={[], 0x1b}, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], 0x110, 0x148, 0x180, [@rateest={'rateest\x00', 0x48, {{'bridge0\x00', 'gretap0\x00', 0x20, 0x3, 0x100000001, 0x1, 0x8, 0x6, 0x8, 0x8000}}}, @cpu={'cpu\x00', 0x8, {{0x3}}}]}, [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0x10}}}]}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x10, 0x0, 'team_slave_0\x00', 'bcsf0\x00', 'ifb0\x00', 'bcsh0\x00', @dev={[], 0x18}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x118, 0x118, 0x168, [@connlabel={'connlabel\x00', 0x8, {{0x80000001, 0x2}}}, @ip6={'ip6\x00', 0x50, {{@dev={0xfe, 0x80, [], 0x11}, @remote, [0xffffffff, 0xffffffff, 0xffffffff, 0xffffff00], [0x0, 0xff000000, 0xffffffff], 0x2, 0x62, 0x0, 0x10, 0x4e22, 0x4e24, 0x4e22, 0x4e20}}}]}}, @common=@log={'log\x00', 0x28, {{0x2, "39be784523adbb7d9f9d97d4ef9232c415e6a5e272a5695740ff4d508574", 0x8}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0x11, 0x10, 0x807, 'veth1_to_bridge\x00', 'team_slave_0\x00', 'ip_vti0\x00', 'team_slave_0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xc8f30ca3f02778de, 0xff], @local, [0xff, 0xff, 0xff, 0xff, 0xff], 0xa0, 0xe8, 0x130, [@vlan={'vlan\x00', 0x8, {{0x1, 0x1, 0x88ff, 0x1, 0x1}}}]}, [@common=@ERROR={'ERROR\x00', 0x20, {"9c7ca89878683770124d430ad2345f238a96de3c9853a61cf3ede536ef11"}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0xffffffff, 0xb932, 0x5}}}}, {{{0x11, 0x31, 0x8884, 'ip_vti0\x00', 'bond0\x00', 'dummy0\x00', 'lo\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff, 0xd41caee8ea8b2048, 0xff], @link_local, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0xa0, 0xa0, 0x118, [@cgroup0={'cgroup\x00', 0x8, {{0x10001}}}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x20, 0x8000, 0x5, 0x0, 0x0, "e5ac8b6bc6e84b4ff649448943e3c9e5ca2bca143366d07ea0cff9984f3794d0793810a2e25a22bd37897b29834ab0f32e8275eb5545f7214ff6a6aea47606dc"}}}}]}]}, 0x638)

[ 1576.412875] binder: 473:485 ioctl 40046207 0 returned -16
[ 1576.428639] binder_alloc: 473: binder_alloc_buf, no vma
[ 1576.438542] binder: 473:506 transaction failed 29189/-3, size 0-0 line 2973
[ 1576.448266] binder: 473:489 BC_FREE_BUFFER u0000000020001000 no match
05:52:28 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=<r1=>0x0)
wait4(r1, &(0x7f0000000040), 0x1000008, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1576.461071] binder: release 473:485 transaction 828 out, still active
05:52:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x500000000000000, 0x0})

05:52:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0), 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1576.485096] binder: undelivered TRANSACTION_COMPLETE
[ 1576.490359] binder: send failed reply for transaction 828, target dead
[ 1576.541726] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1576.579352] binder: BINDER_SET_CONTEXT_MGR already set
05:52:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29bd00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1576.625766] binder: 511:525 ioctl 40046207 0 returned -16
[ 1576.635722] binder: undelivered TRANSACTION_ERROR: 29189
[ 1576.641358] binder: BINDER_SET_CONTEXT_MGR already set
05:52:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0), 0x0, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:28 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x6800]}]}})

[ 1576.669629] binder: 524:531 ioctl 40046207 0 returned -16
[ 1576.680506] binder: 524:535 transaction failed 29189/-22, size 0-0 line 2834
[ 1576.707896] binder: 524:531 BC_FREE_BUFFER u0000000020001000 no match
05:52:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x800000000000001c)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xffff, 0x400200)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080))
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44)

05:52:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x1)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
flock(r0, 0x0)

[ 1576.749998] binder_alloc: binder_alloc_mmap_handler: 524 20001000-20004000 already mapped failed -16
05:52:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298401002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1576.810236] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1576.829400] binder: 524:531 transaction failed 29189/-22, size 0-0 line 2834
[ 1576.847047] binder: BINDER_SET_CONTEXT_MGR already set
05:52:28 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x7a]}]}})

[ 1576.866073] binder: 524:535 BC_FREE_BUFFER u0000000020001000 no match
[ 1576.866116] binder: 524:552 ioctl 40046207 0 returned -16
[ 1576.872825] binder: BINDER_SET_CONTEXT_MGR already set
[ 1576.891147] binder: 553:556 ioctl 40046207 0 returned -16
05:52:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1576.911422] binder: undelivered TRANSACTION_ERROR: 29189
[ 1576.921379] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:28 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:28 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
msgget$private(0x0, 0x1)
r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x20000)
pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="94b6829bad6a7364762eb951a9b69e5b18f3d7f96bb5fc69", 0x18}, {&(0x7f0000000140)="48ba3abefa76b96d75753776713008bccf6690846269c961e923f80343b5b59e7bc2ddfe28ba375df368ce316de3587c2dfe19e53b83923546c520d2dedfcf744f2885950dea9544e417594c4193893dba095a251fb1e1000b13f6c00ada6ab4856915c85ce35066f6f4f77557e650f1c75affbc5b9700fbdf2e04b00c6f3c92184bafed96798caf135cf4f734398618297c2e91247d786a0e736049700b2661f27448d631fd1374a488ec4c52e0804e4c80bfc764c7809ce32430d17561c5ff0321f868e889a60ba732edfd7fda5431d4b1c31841471f2fb46a726251799dd602a4d83e3efc22bef5a134235d", 0xed}], 0x2, 0x9)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f00000000c0))
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x0)

05:52:28 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x700000000000000, 0x0})

05:52:28 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x74]}]}})

05:52:28 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293b00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1577.040055] binder: undelivered TRANSACTION_ERROR: 29189
05:52:28 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1577.085418] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.090917] binder: 572:574 ioctl 40046207 0 returned -16
05:52:28 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x80000)
ioctl$sock_ifreq(r1, 0x89b1, &(0x7f00000000c0)={'nr0\x00', @ifru_map={0x3c2, 0xffffffff, 0x5, 0x101, 0x200, 0xfff}})
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000040)={{0x1, 0x2, 0x8, 0x3, 0x8000}, 0x6, 0x4, 0xffff})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1577.146293] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1577.171927] binder: 583:585 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1577.230372] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.245608] binder_alloc: binder_alloc_mmap_handler: 583 20001000-20004000 already mapped failed -16
[ 1577.256181] binder: 591:595 ioctl 40046207 0 returned -16
[ 1577.263265] binder: BINDER_SET_CONTEXT_MGR already set
05:52:29 executing program 4:
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/ppp\x00', 0x40400, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000001000)=0x800, 0x4)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x1, 0x5, 0x7, 0x5}, 0x10)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f00000000c0)=0x422)
writev(r0, &(0x7f0000000080), 0x0)

05:52:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:29 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x2000000000000000]}]}})

05:52:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290401002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1577.290631] binder: 583:585 ioctl 40046207 0 returned -16
[ 1577.319801] binder_alloc: 583: binder_alloc_buf, no vma
05:52:29 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x2000)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x1, @local, 0xffffffffffffffb1}}, 0x4, 0xfffffffffffffd51}, &(0x7f0000000100)=0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1577.355153] binder: 583:600 BC_FREE_BUFFER u0000000020001000 no match
[ 1577.399508] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1577.412762] binder: send failed reply for transaction 836 to 583:585
[ 1577.425427] binder: 583:597 transaction failed 29189/-3, size 0-0 line 2973
05:52:29 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={<r2=>0x0, 0x80000, 0xffffffffffffff9c})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
chroot(&(0x7f00000002c0)='./file0\x00')
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xe8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000280))
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x00', 0xffffffffffffffff, 0xfeffffff00000000}, &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0)
getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180))
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
exit(0x0)
socket$netlink(0x10, 0x3, 0xf)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r5})

05:52:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291300002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1577.445319] binder: undelivered TRANSACTION_ERROR: 29189
05:52:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4000000, 0x0})

05:52:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1577.481210] binder: 615:616 ioctl c0306201 0 returned -14
[ 1577.498702] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.506930] binder: undelivered TRANSACTION_COMPLETE
[ 1577.524713] binder: undelivered TRANSACTION_ERROR: 29189
05:52:29 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0xffffff7f]}]}})

[ 1577.534405] binder: 615:617 ioctl 40046207 0 returned -16
[ 1577.578569] binder: 615:617 ioctl c0306201 0 returned -14
[ 1577.588941] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.610598] binder: 624:632 ioctl 40046207 0 returned -16
05:52:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:29 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000100)=[@register_looper, @free_buffer={0x40086303, r1}], 0x6b, 0x0, &(0x7f0000000140)="1f054b00360946769793a101b1bacbaf48a4b394d1eede7da0d9a6d2f4ec383a2910862b20583aa781f3cfb4e615c18a867993200507faf83eae53483c37144bb620f47acff0960ffdbd03f907eff4f53fbce37b36e507518f28ec67201eeec2396c9e30460bd8109a6e66"})
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x400000, 0x0)
getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
pipe2(&(0x7f0000000200)={<r4=>0xffffffffffffffff}, 0x80000)
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0)
ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000040)=ANY=[@ANYBLOB="090000000000000020000000000000000700000000000004000000003e98d906070000000000000008000000000000000000000000000000f9ffffff00000000f9ffffff0000ffff0900000000000000c50000ffffffffffffff0500000000000000050000000000000044040000000000000400000000000000010100000000000008000000000000000000000000000000000000000000"])
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294800002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1577.628762] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1577.639419] binder: 624:637 transaction failed 29189/-22, size 0-0 line 2834
[ 1577.658193] binder: 624:632 BC_FREE_BUFFER u0000000020001000 no match
[ 1577.665955] binder_alloc: binder_alloc_mmap_handler: 624 20001000-20004000 already mapped failed -16
05:52:29 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x300]}]}})

[ 1577.719903] binder: 640:644 ERROR: BC_REGISTER_LOOPER called without request
[ 1577.722079] binder: 624:632 transaction failed 29189/-22, size 0-0 line 2834
[ 1577.756089] binder: 624:649 BC_FREE_BUFFER u0000000020001000 no match
05:52:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:29 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:29 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6c, 0x0})

[ 1577.774125] binder_set_nice: 6 callbacks suppressed
[ 1577.774133] binder: 644 RLIMIT_NICE not set
[ 1577.792091] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1577.806397] binder: 640:652 ioctl c0306201 0 returned -14
[ 1577.869924] binder: 640:652 ERROR: BC_REGISTER_LOOPER called without request
[ 1577.906044] binder: 652 RLIMIT_NICE not set
[ 1577.915279] binder: 661:663 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1577.927863] binder: 640:652 ioctl c0306201 0 returned -14
[ 1577.941257] binder_alloc: binder_alloc_mmap_handler: 661 20001000-20004000 already mapped failed -16
[ 1577.966411] binder: BINDER_SET_CONTEXT_MGR already set
[ 1577.975975] binder: 661:663 ioctl 40046207 0 returned -16
[ 1577.987364] binder_alloc: 661: binder_alloc_buf, no vma
[ 1577.993001] binder: 661:668 transaction failed 29189/-3, size 0-0 line 2973
[ 1578.009988] binder: release 661:663 transaction 844 out, still active
[ 1578.019322] binder: undelivered TRANSACTION_COMPLETE
[ 1578.043728] binder: send failed reply for transaction 844, target dead
05:52:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)

05:52:30 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x4]}]}})

05:52:30 executing program 1:
getpeername$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e)
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901bc002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x700, 0x0})

[ 1578.447555] binder: BINDER_SET_CONTEXT_MGR already set
[ 1578.464719] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1578.475427] binder: 691:692 ioctl 40046207 0 returned -16
[ 1578.476519] binder: BINDER_SET_CONTEXT_MGR already set
05:52:30 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000000000000000]}]}})

05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298801002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 1:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x600a82, 0x0)
fadvise64(r0, 0x0, 0xffff, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x3)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc0)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={<r3=>0x0, 0xffff, 0xb2e}, &(0x7f0000000200)=0xc)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000240)={r3, 0xc7, "d99cf34cc459ad64190f2e0bc59016100dfc334dc9938be0b3d9b46b2d087ab3d58d6a0ab2b41bd7bd0e203505df88d13e892336b302654c9f4404039ebb16603f4082e35a086d32c95cef41b776549e9dd29e0a683789df6490d4a247d152efdeded0f75f4bb27ae8ad017f4e561567fff746281ce16b9ffd35c65c766da6fc3a72d2af0a0caafc30275d5235d7e31a0daa36355adb0366dc04dc711d72f84d07c793d7fa17852e92d71ad0394cfead03051b6dcb886dcf06e877ecd8d3bc2edd947986a67867"}, &(0x7f0000000340)=0xcf)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
r4 = fcntl$dupfd(r1, 0x406, r2)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8)
setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in=@empty, 0x4e22, 0x7b1, 0x4e23, 0xfffffffffffffffb, 0x0, 0x0, 0x80, 0x0, r5, r6}, {0xfffffffffffff0b8, 0x0, 0x4, 0xed, 0xcc11, 0x1, 0x899, 0xa}, {0x7, 0x4, 0x101}, 0x88, 0x6e6bb3, 0x1, 0x1, 0x2}, {{@in=@multicast2, 0x4d4, 0xff}, 0xa, @in6=@mcast1, 0x3504, 0x1, 0x0, 0x6, 0x80, 0x5, 0x9}}, 0xe8)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000080), &(0x7f0000000100)=0x68)
ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0xfff, 0x8, 0x1})
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000780)=@req3={0x7fffffff, 0x1, 0x8, 0x1, 0x400, 0x7, 0x80000001}, 0x1c)
r7 = msgget(0x1, 0x0)
msgrcv(r7, &(0x7f0000000380)={0x0, ""/31}, 0x27, 0x1, 0x2800)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8c, 0x0, &(0x7f00000009c0)=[@decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x1, 0x2}, @request_death={0x400c630e, 0x3, 0x3}, @transaction_sg={0x40486311, {{0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000900)=[@ptr={0x70742a85, 0x0, &(0x7f00000008c0), 0x1, 0x2, 0x13}, @fda={0x66646185, 0x3, 0x0, 0x9}], &(0x7f0000000980)=[0x0, 0x40]}, 0x4}}, @enter_looper, @register_looper, @acquire={0x40046305, 0x2}], 0xb8, 0x0, &(0x7f0000000800)="6e57279563d8edcdd9f1cd3ca2937a1f72481daa0d2cb5e939990e170be51ff66caf8cf04222e042e1cfd642d0d8bbc34f98a77a5a37363ac76e2f811b882dacbc0da6797ad58b43df4c8d38216b6818652ddaff89dfd695ebb7cc9fcf461765589960e6ccfaab96e47e7adad663b054864a987b60a22eb27b48c151c8f035207edb9e4a0c06e35a0f32c3e3fb28b544346699ca75ce447197fb3952af3fa509055d466a9743bf9ba8286e0532d4364bebd2997ca54b3acd"})

05:52:30 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
readv(r0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/75, 0x4b}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/238, 0xee}], 0xa)

[ 1578.511105] binder: 694:697 ioctl 40046207 0 returned -16
[ 1578.550820] binder_alloc: binder_alloc_mmap_handler: 694 20001000-20004000 already mapped failed -16
[ 1578.575374] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291301002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x20000000]}]}})

05:52:30 executing program 4:
arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x7)
socket$netlink(0x10, 0x3, 0x0)

05:52:30 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x2)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1578.695547] binder_alloc: 694: binder_alloc_buf, no vma
05:52:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6800, 0x0})

05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b402002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1578.822306] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1578.882308] binder: 736:738 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1578.896775] binder: BINDER_SET_CONTEXT_MGR already set
[ 1578.902091] binder: 742:746 ioctl 40046207 0 returned -16
05:52:30 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0xfecaedfe]}]}})

05:52:30 executing program 4:
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))

[ 1578.936737] binder_alloc: binder_alloc_mmap_handler: 736 20001000-20004000 already mapped failed -16
[ 1578.964879] binder: BINDER_SET_CONTEXT_MGR already set
[ 1578.970289] binder: 736:738 ioctl 40046207 0 returned -16
05:52:30 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4000000, 0x3e, r1, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297b02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1578.984219] binder_alloc: 736: binder_alloc_buf, no vma
[ 1579.003491] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1579.004993] binder: release 736:738 transaction 852 out, still active
[ 1579.024505] binder: undelivered TRANSACTION_COMPLETE
[ 1579.062024] binder: BINDER_SET_CONTEXT_MGR already set
05:52:30 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7a00]}]}})

05:52:30 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4c00, 0x0})

[ 1579.108936] binder: 754:758 ioctl 40046207 0 returned -16
[ 1579.109501] binder: send failed reply for transaction 852, target dead
05:52:30 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29027b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:30 executing program 4:
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
syncfs(r0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1579.203021] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1579.254153] binder: 776:777 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:31 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:31 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6c]}]}})

05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298e02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1579.317958] binder_alloc: binder_alloc_mmap_handler: 776 20001000-20004000 already mapped failed -16
[ 1579.348209] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.354099] binder_alloc: 776: binder_alloc_buf, no vma
[ 1579.362856] binder: BINDER_SET_CONTEXT_MGR already set
05:52:31 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000100))

[ 1579.365915] binder: 776:777 ioctl 40046207 0 returned -16
[ 1579.377070] binder: 787:788 ioctl 40046207 0 returned -16
[ 1579.388091] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1579.415196] binder: 787:793 ioctl c0306201 0 returned -14
[ 1579.423978] binder: release 776:777 transaction 856 out, still active
[ 1579.431932] binder: undelivered TRANSACTION_COMPLETE
[ 1579.449006] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.464991] binder: 787:793 ioctl 40046207 0 returned -16
[ 1579.465058] binder: send failed reply for transaction 856, target dead
05:52:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:31 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="327dd9bc5c54ec11c05e82787c09faf5ce90e31037dfe658154e1ed52ca750a7fb5ced302bb280b21cce341ed480e17131caae27a0ee3aead48a718d42d1fb72bc50f9807d465dce7f345b55b94008abc1d12524686cac59766b5e284b9f493d78ee71c2b1b11fce4213afb8c7763bcd7e2ca5c512d48e5ffd61d460abfef27978049a3b42f107bc93d1725d6993ba7e589eed5a6911e1891ff7780d060be5f91a956a713d2387e16c41693c505a3e463018fd2dfbe8b12547a49efe5828cb026a351f1cce3950d2e6e3a12a5782221822e10e2322dc3d4af22d802820cec63b4af824b31d517064b2821c000000000000000000"}, {&(0x7f0000000180)="f6e106f597c406c27f99a474676f38859ac72243bebaddd251d04795f1c91f0962e5170a4d8aa9454f9446578e60606147dbf1d55ab474ddb766f7583b518734f9dfc2470b25900a88cdf7bfbdb0e7ece22aa8fc4349b6ea0d4c4223c844e39f5bad43c20215e126759045a6a265e46e754333a5d99db92afcddab2a141753a1b1e015423d91abd4c97a4874cdf409373b7f48e5b2e2d1fdd508fe4d2c572edfea2abe23108e"}, {&(0x7f0000000240)="1e37e06c8b1523b5674440910a6afb115f39771326714dbb905deae50e10fce767b4e8607816f3d9dba3e1b326280d860fd1d9d90c54d1c96fd19b676f7e4b13a1783b80a9b09da1e04561b054c083bc4391ca7f01e02e841b757ec0f56752a285345d062a7f079b173d262c34f800c53b4a0c1a545fec5b81bb0e65931ccf639b8ce50e3db8b2f81de28dc9c99c019101447a82e71981a72c9b621fab8aa6bcb91a0fa42b232edaaf7c877728bc58318d6397e6992fe5ae74e1cb9b2f8eaa1d8b25fe7f1c30f560b92fbc3f0c160f3c41ccd34c2a10de6444d316", 0x20f}, {&(0x7f0000000340)="9f82122bc9ff40bfa349ac3d037368442c86e6497c92a174eaa86d4af70c53d00be8aa93700000000000000040a38dd59ba05a52933525cb1ecf77396964f976165587cb97a0d94c832ec4a3a2b6e0bdf125c05fc6bb8b347ecfac97bf2fca297a63a027ef52c1580849a685fab66d8370a639850bc8edadd969d011"}], 0x100000000000027c)

05:52:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6000, 0x0})

05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293b02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:31 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x60000000]}]}})

[ 1579.515325] binder: 787:788 ioctl c0306201 0 returned -14
05:52:31 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0xa00)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/4096)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1579.664688] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1579.671297] binder: 811:813 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1579.687297] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.705946] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:31 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xfffffffffffffda3}], 0x1)

[ 1579.709799] binder: 820:821 ioctl 40046207 0 returned -16
05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1579.745970] binder_alloc: binder_alloc_mmap_handler: 811 20001000-20004000 already mapped failed -16
[ 1579.758116] binder: 820:828 ioctl c0306201 0 returned -14
05:52:31 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7400]}]}})

05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297d00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1579.791536] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.809539] binder: 811:813 ioctl 40046207 0 returned -16
[ 1579.815287] binder: BINDER_SET_CONTEXT_MGR already set
[ 1579.815304] binder: 820:832 ioctl 40046207 0 returned -16
[ 1579.815444] binder: 820:821 ioctl c0306201 0 returned -14
[ 1579.830391] binder_alloc: 811: binder_alloc_buf, no vma
05:52:31 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040), 0xa0)

05:52:31 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1579.843514] binder_thread_write: 7 callbacks suppressed
[ 1579.843528] binder: 811:827 BC_FREE_BUFFER u0000000020001000 no match
[ 1579.856387] binder: release 811:813 transaction 859 out, still active
[ 1579.863580] binder: undelivered TRANSACTION_COMPLETE
[ 1579.919842] binder: send failed reply for transaction 859, target dead
[ 1579.934320] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1579.958470] binder: BINDER_SET_CONTEXT_MGR already set
05:52:31 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4c, 0x0})

05:52:31 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:31 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x16)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/186, 0xba}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/121, 0x79}], 0x4)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1579.989483] binder: 843:845 ioctl 40046207 0 returned -16
05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29009a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:31 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm_plock\x00', 0x0, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000400)={0xf, 0xb6, {0x57, 0x1, 0x3, {0x1, 0x40}, {0x8, 0x2}, @cond=[{0x9, 0x2, 0xfffffffffffffc92, 0x9, 0x5, 0x3}, {0x1ff, 0x6, 0x5, 0x8, 0x0, 0x101}]}, {0x57, 0x8, 0x9, {0x6, 0x6}, {0x7}, @rumble={0x5, 0x7fffffff}}})
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/139, 0x8b}], 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000000)={<r2=>0x0, 0x80, 0x20}, &(0x7f0000000040)=0xc)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001010000000000000000000000"], 0x68)
listen(r0, 0x58a)
r4 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000080)={r2, 0x9}, &(0x7f00000000c0)=0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1580.064695] binder: 848:849 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:31 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4c00]}]}})

[ 1580.163391] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.183128] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.197201] binder: 848:868 ioctl 40046207 0 returned -16
[ 1580.204740] binder: 863:864 ioctl 40046207 0 returned -16
05:52:31 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900c4002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:32 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1580.210933] binder: 848:872 BC_FREE_BUFFER u0000000020001000 no match
[ 1580.227612] binder_alloc: 848: binder_alloc_buf, no vma
[ 1580.237487] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1580.248926] binder: BINDER_SET_CONTEXT_MGR already set
05:52:32 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x5]}]}})

[ 1580.270795] binder_transaction: 5 callbacks suppressed
[ 1580.270818] binder: 848:869 transaction failed 29189/-3, size 0-0 line 2973
[ 1580.288094] binder: 863:864 ioctl 40046207 0 returned -16
[ 1580.296926] binder: send failed reply for transaction 863 to 848:849
[ 1580.303530] binder: undelivered TRANSACTION_COMPLETE
05:52:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900d4002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7a, 0x0})

05:52:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1580.364845] binder_release_work: 8 callbacks suppressed
[ 1580.364852] binder: undelivered TRANSACTION_ERROR: 29189
[ 1580.431438] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1580.431476] binder: undelivered TRANSACTION_ERROR: 29189
05:52:32 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8a3, 0x48242)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c802002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1580.563939] binder: 898:901 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1580.579943] binder: BINDER_SET_CONTEXT_MGR already set
05:52:32 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7400000000000000]}]}})

[ 1580.613129] binder: 899:900 ioctl 40046207 0 returned -16
[ 1580.645748] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.680416] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1580.689433] binder: 898:901 ioctl 40046207 0 returned -16
[ 1580.695488] binder: BINDER_SET_CONTEXT_MGR already set
[ 1580.700807] binder: 899:900 ioctl 40046207 0 returned -16
[ 1580.701708] binder_alloc: 898: binder_alloc_buf, no vma
05:52:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290a02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1580.728186] binder: 898:914 BC_FREE_BUFFER u0000000020001000 no match
05:52:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1580.770703] binder: 898:908 transaction failed 29189/-3, size 0-0 line 2973
[ 1580.775052] binder: send failed reply for transaction 866 to 898:901
05:52:32 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0xfecaedfe00000000]}]}})

[ 1580.840656] binder: undelivered TRANSACTION_ERROR: 29189
[ 1580.870331] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:32 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7400000000000000, 0x0})

[ 1580.926601] binder: undelivered TRANSACTION_COMPLETE
[ 1580.931959] binder: undelivered TRANSACTION_ERROR: 29189
05:52:32 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x10001, 0x20200)
getsockopt$inet_dccp_buf(r1, 0x21, 0x8d, &(0x7f0000000080)=""/242, &(0x7f0000000180)=0xf2)
write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x3, 0x2, 0x8000}}, 0x28)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x16000, &(0x7f0000000200), 0x6, r1, 0x4})

05:52:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296402002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:32 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x408002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000040)={0x8, 0x1, 0xfffffffffffffbff, 'queue0\x00', 0xbbfd})

05:52:32 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6c00000000000000]}]}})

[ 1581.042358] binder: 932:933 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1581.055650] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.073442] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1581.084837] binder: 936:937 ioctl 40046207 0 returned -16
05:52:32 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290017002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1581.099515] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.105414] binder: 936:943 ioctl 40046207 0 returned -16
[ 1581.117709] binder_alloc_mmap_handler: 2 callbacks suppressed
[ 1581.117727] binder_alloc: binder_alloc_mmap_handler: 932 20001000-20004000 already mapped failed -16
05:52:32 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0xffffffffffffff9e}], 0x100000000000003c)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x905)

05:52:32 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1581.163939] binder: BINDER_SET_CONTEXT_MGR already set
05:52:32 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:32 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2]}]}})

[ 1581.225243] binder: 932:954 BC_FREE_BUFFER u0000000020001000 no match
[ 1581.235010] binder: 932:933 ioctl 40046207 0 returned -16
05:52:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ab00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1581.278458] binder_alloc: 932: binder_alloc_buf, no vma
[ 1581.295006] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.298631] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
io_setup(0x7, &(0x7f0000000080)=<r1=>0x0)
r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x408002, 0x0)
io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x7ff, r0, &(0x7f00000000c0)="5b697d294d78e4b36f3d0752a871e394f18cf8b84d1f08f9f8843419d22482bea6851fcab11f6e984b24d9a3ea24a584f270f39031eacd9507981c004a0efb83ab7b53dbac0c2791b79c55637378ceab84b5f7d2bd0542ccdc6a0cc99f09b43c6bfeccdef4aef5055efcd45436", 0x6d, 0x3, 0x0, 0x0, r2}, &(0x7f00000001c0))
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000280)={<r3=>0x0, @in={{0x2, 0x4e24, @loopback}}, [0x8, 0x1ff, 0x7, 0x2, 0x8, 0x1, 0x0, 0x1, 0x6, 0x9, 0x3, 0x2, 0x8, 0x100, 0x8]}, &(0x7f0000000380)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000003c0)={r3, 0x7fff}, &(0x7f0000000400)=0x8)
connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x32, 0x100000000, 0x40, 0x4, 0xff, 0xfffffffffffffc89}, 0x6}, 0xa)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x111, 0x100b}}, 0x20)

[ 1581.324963] binder: 957:961 ioctl 40046207 0 returned -16
[ 1581.325149] binder: release 932:933 transaction 869 out, still active
[ 1581.334211] binder: 932:947 transaction failed 29189/-3, size 0-0 line 2973
[ 1581.352932] binder: undelivered TRANSACTION_COMPLETE
[ 1581.363986] binder: BINDER_SET_CONTEXT_MGR already set
[ 1581.389209] binder: 957:961 ioctl 40046207 0 returned -16
[ 1581.389860] binder: send failed reply for transaction 869, target dead
05:52:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6c00000000000000, 0x0})

05:52:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x60]}]}})

05:52:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290297002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:33 executing program 1:
syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1581.470256] binder: undelivered TRANSACTION_ERROR: 29189
[ 1581.513914] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1581.535003] binder: BINDER_SET_CONTEXT_MGR already set
05:52:33 executing program 4:
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x305080, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x3)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = dup2(r0, r0)
syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7f, 0x2)
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000080)={0x0, 0x3f})

05:52:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x500000000000000]}]}})

[ 1581.568522] binder: 979:984 ioctl 40046207 0 returned -16
[ 1581.570367] binder: BINDER_SET_CONTEXT_MGR already set
05:52:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29006f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:33 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x202000)
mq_notify(r1, &(0x7f00000001c0)={0x0, 0x3a, 0x0, @thr={&(0x7f0000000040)="5a766893a6bcf93e5112340516737e97dd0fd976b63eb5cd2709c9a687949b3421b7146ff9db956577c21899066c56576ec9a862e0b0abb40eac4d66a70152934cc711528f9685df3609a2e0fb3ceded256d7cccc6e9ff446bbaf3a27c8b886e79ec95986ce33f6246b2e4f06b85d60f70c8db6c1597b07043df398cc565d17b5671b01618e17439e4740815ff4fb84f213bba3a0580e2cd578a937a6dc3259b5a8d6a6f56506a5919753a09f10b", &(0x7f0000000100)="2e92d3954a07305d7865d9781f2a1e60d258fe03e2142c0669f0b7cea2fa995e7436d54fe9f5513cbd6a42f7a558396ee294e5c7f3fcd03cd6cc9c5002df0f86ff4bd1f11c734919d4394d5ab082f01d68d41931015d2f6958989d4c005b8811e90868e4a8050b41dee4a8217c495c40d74b0ca511fceee034ab9d0f93a1e510b01738fbb093f724d6f88f7d36705208dd01040960dfea188210b57d0173af7563f7c91817e8fec18b2258e617"}})
syz_open_dev$binder(0x0, 0x0, 0x800)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
getsockopt(r1, 0xffffffffffffffa5, 0x400, &(0x7f0000000200)=""/30, &(0x7f0000000240)=0x1e)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2)

[ 1581.646325] binder: 985:986 ioctl 40046207 0 returned -16
[ 1581.647009] binder: 985:994 transaction failed 29189/-22, size 0-0 line 2834
05:52:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1581.719891] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1581.757519] binder: 985:986 BC_FREE_BUFFER u0000000020001000 no match
05:52:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x223}], 0x1)

[ 1581.771331] binder: BINDER_SET_CONTEXT_MGR already set
05:52:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29017b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6000]}]}})

[ 1581.796977] binder: 1006:1008 ioctl 40046207 0 returned -16
[ 1581.829375] binder_alloc: binder_alloc_mmap_handler: 985 20001000-20004000 already mapped failed -16
[ 1581.891795] binder_alloc: 985: binder_alloc_buf, no vma
[ 1581.906491] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1581.919264] binder: 985:1005 transaction failed 29189/-3, size 0-0 line 2973
05:52:33 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4c00000000000000, 0x0})

05:52:33 executing program 1:
r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

05:52:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x20000)
r2 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2813, r1, 0x0)
r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x80010, r1, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xcc, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="11634840030000000000000004000000000000000000000011000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a62770a010000", @ANYRES64=r2, @ANYBLOB="0400000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="090000000000000005630440010000000663044000000000066304400200000010630840010000000000000012634840030000000000000004000000000000000000000011000000000000000000000030000000000000001000000000000000", @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="852a62730101000067cdeef084c8ecac73e9f43740f15ec592c9230fffb63485dfa5c5dd57560940f49dd51c9960249b52aa9c6f4b4bcb91fbbdc625a47c96840dcc9b574cb63a2aeff2f5790df06f83a9982a7330040ac4018e0043c6b5fa291af4805dc9b6d18d2f6f047916640b04882709e46b7abeafa0816b2def03f0c394045c74fde0249cd74df8118de59afd09156578b91a7c008d1dde2a45396a99f14a06c1502a21d6124aec65e9e8d96af031846a07c720000000cc95dcc73f6d189747b1c1ad6fb9091f307fe876e388af36edcdf1080fc8c28c3d0000000000000000000000000000", @ANYRES64=r3, @ANYBLOB="0100000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000100000000000000"], @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='x\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000f630c40020000000300000000000000"], 0xc4, 0x0, &(0x7f0000000280)="1a5c926f4237d7f1ed97d7cb96ce66c098d5720a4a365335994a21e1a286540c75659874d29970ad90a2f696fb3ebefb1aeefc662e39ef470ad22dd43ac4531b7307d69ee6d35155e5566b9f0e51e62246b8d35070ed279f3b678e2ffbda78446e860dd731f67298bacc231cf74e05a213760aeb9a92d8c0120bc9f1b14907e314b27776b9fcf1ca52b2d52423644ffecd5bf9d7f9a407b837b30e48cb13fd8f6917058f1ed54e118da7d9cd3f23bc7c7db1149d2dca6cedd399b42603a34d564217c673"})

05:52:33 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29003f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4]}]}})

[ 1581.946005] binder: 985:1033 BC_FREE_BUFFER u0000000020001000 no match
[ 1581.958623] binder: undelivered TRANSACTION_ERROR: 29189
[ 1581.981262] binder: undelivered TRANSACTION_ERROR: 29189
[ 1582.048039] binder: 1042:1043 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:33 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:33 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001740)=ANY=[]}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xb, 0x4000013, r3, 0x0)
ptrace$getenv(0x4201, 0x0, 0x6, &(0x7f0000000600))

05:52:33 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x381001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x8, @time={0x77359400}, 0xfffffffffffffffd, {0x7d3, 0x3}, 0x9, 0x0, 0x5})

[ 1582.104358] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1582.144087] binder_alloc: binder_alloc_mmap_handler: 1042 20001000-20004000 already mapped failed -16
[ 1582.181491] binder: BINDER_SET_CONTEXT_MGR already set
05:52:33 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6]}]}})

05:52:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902c5002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1582.213342] binder: 1042:1054 ioctl 40046207 0 returned -16
[ 1582.238926] binder_alloc: 1042: binder_alloc_buf, no vma
[ 1582.244478] binder: 1042:1058 transaction failed 29189/-3, size 0-0 line 2973
[ 1582.288224] binder: 1042:1068 BC_FREE_BUFFER u0000000020001000 no match
[ 1582.309212] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1582.320378] binder: release 1042:1043 transaction 877 out, still active
05:52:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000b7b3125920f8e0192f002000190f00003fffffffda060200000600e800b6040000040d000c27bf1100f4a905000000", 0x32}], 0x1)

05:52:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298702002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1582.333664] binder: undelivered TRANSACTION_COMPLETE
[ 1582.345214] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1582.361670] binder: send failed reply for transaction 877, target dead
05:52:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x300, 0x0})

05:52:34 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0xffffff7f00000000]}]}})

[ 1582.450082] binder: undelivered TRANSACTION_ERROR: 29189
05:52:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d402002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000), 0x0)

05:52:34 executing program 1:
clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000100)='EPL\x00'}, 0x48)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x14)
wait4(0x0, 0x0, 0x0, 0x0)

[ 1582.515377] binder: 1085:1086 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1582.539129] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x3f00000000000000]}]}})

[ 1582.637587] binder_alloc: binder_alloc_mmap_handler: 1085 20001000-20004000 already mapped failed -16
05:52:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299b02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:34 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x19)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1582.726816] binder_alloc: 1085: binder_alloc_buf, no vma
[ 1582.745143] binder: BINDER_SET_CONTEXT_MGR already set
[ 1582.752625] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1582.767065] binder: 1085:1103 transaction failed 29189/-3, size 0-0 line 2973
05:52:34 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290192002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:34 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x300000000000000]}]}})

[ 1582.770451] binder: 1085:1109 ioctl 40046207 0 returned -16
[ 1582.781311] binder: 1085:1118 BC_FREE_BUFFER u0000000020001000 no match
[ 1582.788872] binder: release 1085:1086 transaction 880 out, still active
[ 1582.797141] binder: undelivered TRANSACTION_COMPLETE
[ 1582.808218] binder: send failed reply for transaction 880, target dead
05:52:34 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x60, 0x0})

05:52:34 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
pwritev(r0, &(0x7f00000004c0)=[{0xfffffffffffffffd}, {&(0x7f00000000c0)="067e78e96fa658b1180748b3429ca8adbbcc13a6cbef7b66c1586abe375951e3089a1bf4303bbd7024acb582c7f8f95f9b582a2729c54b72df0ee5dad7ee42e97f8849e682b579b832917968fe72f1ee8bacc277b148a8ee08cdb9508a52b62c77b404aecc8f49ff095c2fa9dd2ec57c717ce4307e64103844d5610bebfe3d279b01d805c7fede3b12f267917c6997789d956d84ad08b4befc162f98d64a83865f3195c4536d1ac51689b6166fdcd5032e2f7c4072ba192cba7f50f896c938db5d024e154f32950f5579e57c0cdab4ceebe7644e5982b815d6e78461b51740879aeae2e85c9d7409a6752985f80f4824e1", 0xf1}, {&(0x7f0000000000)="bc863063a3f082f57a251dc48e63c87b1d", 0x11}, {&(0x7f00000001c0)="a556c04c14a72f22dfd36f81f93769e5ee51940b477938c797dd229a078cb0b561cc87b7c6faa5ce6cf66e1461", 0x2d}, {&(0x7f0000000200)="bb4ab2423854af0d62f6a378107b37d44b42d26defcf50b9a93244e2f767ba83717cbc10828c586ef0a4d0d724d8e645dc4953fe044090e45b984b8b453911a85e490b623004b1997fd94443ae03529a563200dc64df46857f23bffb", 0x5c}, {&(0x7f0000000280)="70fd476cf9dca517ede50b06c18fc6f4e81728062fa46651ec3f416b29508c50d278", 0x22}, {&(0x7f00000002c0)="0f50f504312383f15eb585e19d56e7a69d92f10aaf58054c66d3e4e077a32f99195b5d55bb12cbb6318a4f5f3ff5a76ad937ef4a137ad2d44572137c538ef5026a38a97244adbe37064c6963bb8af9669358790aae2bfae0932c7f8833f81d629648a1cc806cddc71838fc06ea70f8a7dbb3e3cb591abb45468446c0f5ffea2c0fba578523b6f74cd7c02da701ea856947649b611330a4a09a1eef0dab2172f1eddcc05637211cb4884f19d28bba30feac2b3a143b034b9bc69f3fa89e46088a585623987f768d7bc603aa355514ccd25b29644df2aa00", 0xd7}, {&(0x7f00000003c0)="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", 0xfa}], 0x8, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x1)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000080)="290000002000190f00003fffffefda060200000600e80001040000040d000c000000000000", 0xfffffffffffffcb1}], 0x1)

[ 1582.845008] binder: undelivered TRANSACTION_ERROR: 29189
[ 1582.907346] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1582.977611] binder: 1132:1136 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1583.017201] binder_alloc: binder_alloc_mmap_handler: 1132 20001000-20004000 already mapped failed -16
[ 1583.028389] binder: BINDER_SET_CONTEXT_MGR already set
[ 1583.035076] binder: 1132:1136 ioctl 40046207 0 returned -16
[ 1583.036695] binder_alloc: 1132: binder_alloc_buf, no vma
[ 1583.046786] binder: 1132:1138 transaction failed 29189/-3, size 0-0 line 2973
[ 1583.060025] binder: 1132:1138 BC_FREE_BUFFER u0000000020001000 no match
[ 1583.068056] binder: release 1132:1136 transaction 883 out, still active
[ 1583.079899] binder: undelivered TRANSACTION_COMPLETE
[ 1583.085463] binder: send failed reply for transaction 883, target dead
[ 1583.094470] binder: undelivered TRANSACTION_ERROR: 29189
05:52:35 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:35 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0xffffff7f]}]}})

05:52:35 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901f2002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:35 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x1f)
r1 = memfd_create(&(0x7f00000008c0)='/dev/swradio#\x00', 0x1)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000900)={<r2=>0x0, @rand_addr, @loopback}, &(0x7f0000000940)=0x268)
setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000980)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000080))
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f00000009c0)=""/111, &(0x7f0000000a40)=0x6f)

[ 1583.466010] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:37 executing program 1:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x4000, 0x0)

05:52:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x4800000000000000, 0x0})

05:52:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900c9002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x1000000]}]}})

05:52:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
pread64(r0, &(0x7f0000000080)=""/235, 0xeb, 0x0)

05:52:37 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1585.662382] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1585.667212] binder: 1171:1179 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8)
r1 = accept4(r0, &(0x7f0000000200)=@generic, &(0x7f0000000040)=0x80, 0x0)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0xa0000, 0x0)
write$FUSE_BMAP(r2, &(0x7f0000000400)={0x18, 0x0, 0x4, {0x100}}, 0x18)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@dev, @in=@remote}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8)

[ 1585.718879] binder_alloc: binder_alloc_mmap_handler: 1171 20001000-20004000 already mapped failed -16
05:52:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29009b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:37 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x0, 0x80, 0x0, 'queue1\x00'})

05:52:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7]}]}})

[ 1585.770349] binder_alloc: 1171: binder_alloc_buf, no vma
[ 1585.776575] binder: BINDER_SET_CONTEXT_MGR already set
[ 1585.782034] binder: 1171:1187 transaction failed 29189/-3, size 0-0 line 2973
[ 1585.817961] binder: 1171:1190 ioctl 40046207 0 returned -16
[ 1585.840264] binder: 1171:1195 BC_FREE_BUFFER u0000000020001000 no match
[ 1585.863040] binder: release 1171:1179 transaction 886 out, still active
[ 1585.873560] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1585.875206] binder: undelivered TRANSACTION_COMPLETE
[ 1585.900729] binder: send failed reply for transaction 886, target dead
05:52:37 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x6000000, 0x0})

05:52:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c102002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1585.914377] binder: undelivered TRANSACTION_ERROR: 29189
05:52:37 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x1f)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x3f, 0x8004, 0x3, 0x0, <r2=>0x0}, &(0x7f00000000c0)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x8)

05:52:37 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x1e, &(0x7f0000013e95), 0x4)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0xe, &(0x7f0000001040), &(0x7f0000000000)=0x194)
close(r2)
close(r1)

[ 1585.960137] binder: 1207:1208 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x600000000000000]}]}})

[ 1586.015371] binder_alloc: binder_alloc_mmap_handler: 1207 20001000-20004000 already mapped failed -16
05:52:37 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29be00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:37 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x200000000000000]}]}})

[ 1586.064148] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1586.068534] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.098796] binder: 1207:1208 ioctl 40046207 0 returned -16
[ 1586.099870] binder_alloc: 1207: binder_alloc_buf, no vma
[ 1586.145181] binder: 1207:1213 BC_FREE_BUFFER u0000000020001000 no match
[ 1586.162090] binder: 1207:1224 transaction failed 29189/-3, size 0-0 line 2973
[ 1586.195894] binder: send failed reply for transaction 889 to 1207:1208
[ 1586.207523] binder: undelivered TRANSACTION_ERROR: 29189
[ 1586.207843] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1586.267149] binder: undelivered TRANSACTION_COMPLETE
[ 1586.272476] binder: undelivered TRANSACTION_ERROR: 29189
05:52:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295301002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x2)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:38 executing program 1:
select(0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x6}, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000080)='system_u:object_r:wtmp_t:s0', 0x0)
fsetxattr(r0, &(0x7f00000000c0)=@known='security.selinux\x00', &(0x7f0000000100)="3a0100000001000000", 0xff12, 0x0)

05:52:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xfdfdffff, 0x0})

05:52:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6800]}]}})

[ 1586.576517] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1586.585394] binder: 1247:1249 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299601002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1586.617094] binder_alloc: binder_alloc_mmap_handler: 1247 20001000-20004000 already mapped failed -16
[ 1586.639986] binder: BINDER_SET_CONTEXT_MGR already set
[ 1586.649748] binder: 1247:1249 ioctl 40046207 0 returned -16
05:52:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x4000000000000000)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0xfeedcafe]}]}})

[ 1586.665109] binder_alloc: 1247: binder_alloc_buf, no vma
[ 1586.699396] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1586.715039] binder: 1247:1254 transaction failed 29189/-3, size 0-0 line 2973
[ 1586.732451] binder: send failed reply for transaction 892 to 1247:1249
[ 1586.743938] binder: undelivered TRANSACTION_COMPLETE
05:52:38 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c902002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1586.750288] binder: undelivered TRANSACTION_ERROR: 29189
05:52:38 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
r2 = add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="6eb2e6516d06b4d7089c3e362af22586cb625d087a35185102c9d627e62dbd9b710d41d51f1826f78539aaf1df3aa89982819f5574337064f149f61a531ca2ca3c4e2f290536c2cbedabbeacbcb89ff2c694750b23a1071d6906a2e1303be5dc86f98c016adf32cb6731d712b691566b27909a6229719ff7cf7b8bdb", 0x7c, 0xfffffffffffffffd)
keyctl$search(0xa, r1, &(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, r2)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:38 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x68000000]}]}})

[ 1586.798668] binder: undelivered TRANSACTION_ERROR: 29189
[ 1586.868399] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:38 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:38 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x7400, 0x0})

05:52:38 executing program 4:
writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1587.028581] binder: 1285:1286 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1587.042524] binder_alloc: binder_alloc_mmap_handler: 1285 20001000-20004000 already mapped failed -16
[ 1587.059639] binder: BINDER_SET_CONTEXT_MGR already set
[ 1587.072287] binder: 1285:1286 ioctl 40046207 0 returned -16
[ 1587.083199] binder_alloc: 1285: binder_alloc_buf, no vma
[ 1587.095421] binder: 1285:1289 transaction failed 29189/-3, size 0-0 line 2973
[ 1587.110163] binder: 1285:1295 BC_FREE_BUFFER u0000000020001000 no match
[ 1587.119672] binder: release 1285:1286 transaction 895 out, still active
[ 1587.128125] binder: undelivered TRANSACTION_COMPLETE
[ 1587.151988] binder: send failed reply for transaction 895, target dead
[ 1587.167107] binder: undelivered TRANSACTION_ERROR: 29189
05:52:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4c000000]}]}})

05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290f00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:39 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x8, 0x4080)
fcntl$notify(r0, 0x402, 0x80000000)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x200000, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381)
r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200200, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x6, 0x3, 0x2})
fsetxattr$security_capability(r1, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x9, 0x6}]}, 0xc, 0x3)

05:52:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x2000, 0x0})

05:52:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1587.425013] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1587.453635] binder: 1311:1313 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901eb002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:39 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1587.487471] binder_alloc: binder_alloc_mmap_handler: 1311 20001000-20004000 already mapped failed -16
[ 1587.525102] binder: BINDER_SET_CONTEXT_MGR already set
[ 1587.530751] binder_alloc: 1311: binder_alloc_buf, no vma
05:52:39 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2)
setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f0000000080)="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", 0xfb)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x78028676ed3cb0bb}, 0xc)

05:52:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6c00]}]}})

[ 1587.553918] binder: 1311:1313 ioctl 40046207 0 returned -16
[ 1587.583902] binder: 1311:1317 transaction failed 29189/-3, size 0-0 line 2973
[ 1587.637039] binder: 1311:1323 BC_FREE_BUFFER u0000000020001000 no match
[ 1587.651995] binder: release 1311:1313 transaction 898 out, still active
[ 1587.671656] binder: undelivered TRANSACTION_COMPLETE
05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290701002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:39 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0x80)

[ 1587.689130] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1587.700559] binder: send failed reply for transaction 898, target dead
05:52:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7a]}]}})

05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a602002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x400000000000000, 0x0})

[ 1587.847957] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1587.854280] binder: undelivered TRANSACTION_ERROR: 29189
05:52:39 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:39 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296801002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1587.979917] binder: 1356:1358 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1588.025432] binder_alloc: binder_alloc_mmap_handler: 1356 20001000-20004000 already mapped failed -16
[ 1588.047954] binder: BINDER_SET_CONTEXT_MGR already set
05:52:39 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6000000]}]}})

05:52:39 executing program 4:
r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc038563c, &(0x7f0000000080)={0x0, 0x1f})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1588.072741] binder: 1356:1358 ioctl 40046207 0 returned -16
[ 1588.092338] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1588.106333] binder_alloc: 1356: binder_alloc_buf, no vma
05:52:39 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299b00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1588.142457] binder: 1356:1377 BC_FREE_BUFFER u0000000020001000 no match
[ 1588.173401] binder: send failed reply for transaction 901 to 1356:1358
[ 1588.180923] binder: 1356:1368 transaction failed 29189/-3, size 0-0 line 2973
05:52:39 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x600]}]}})

[ 1588.201829] binder: undelivered TRANSACTION_ERROR: 29189
05:52:39 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x68, 0x0})

05:52:40 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00013fffffffda06020000d5eae80001040000040d001700ea1100000b05000000", 0xfffffffffffffe94}], 0x1)

[ 1588.244175] binder: undelivered TRANSACTION_COMPLETE
[ 1588.249513] binder: undelivered TRANSACTION_ERROR: 29189
05:52:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290212002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1588.300513] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1588.313531] binder: 1391:1394 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1588.326076] binder_alloc: binder_alloc_mmap_handler: 1391 20001000-20004000 already mapped failed -16
[ 1588.336101] binder: BINDER_SET_CONTEXT_MGR already set
[ 1588.341503] binder: 1391:1394 ioctl 40046207 0 returned -16
05:52:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x700000000000000]}]}})

[ 1588.396085] binder_alloc: 1391: binder_alloc_buf, no vma
[ 1588.396602] binder: 1391:1402 BC_FREE_BUFFER u0000000020001000 no match
05:52:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1588.449579] binder: release 1391:1394 transaction 904 out, still active
[ 1588.475586] binder: 1391:1395 transaction failed 29189/-3, size 0-0 line 2973
[ 1588.485448] binder: undelivered TRANSACTION_COMPLETE
[ 1588.487516] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1588.490649] binder: send failed reply for transaction 904, target dead
05:52:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290082002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:40 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sysfs$1(0x1, &(0x7f0000000000)='posix_acl_accesscgroup&)*\x00')
writev(r0, &(0x7f0000001380)=[{&(0x7f0000000080)="7c97ba565762bd98b5b9b09eb311eee2d79514f7c379ab5bc562d42dc1455552968ac42255e354a18ea11c99550b3756354ca6c93978b2c78de36cdd948fd4b29dd8fa95f8526b23769786c063868952f7c0ce73cffbd0b8840b3effc86d5fb778e62e09f0414fbd4681433b0f4828fa57f57c5d101f79bfa435ace2910d6499d96c5ac08ce4bc393a19819c87fce38cbf3d1bbe138b788468cdfbdb4c0c977a9d05db8cb735399a133998b1a8eb1a6adb20fbbc72752132fc60d6dfc9", 0xbd}, {&(0x7f0000000140)="0ebb7650aa639223398bbeb2bab6fa1f71c320", 0x13}, {&(0x7f0000000180)="72dbf98ff7cf17122dfa7426d618148fb4b4850360b46e51cf146c771f7cb893d1d15c041043822bd78e3c3c624aa3e4f09f0217edff07c23a95536f32637e", 0x3f}, {&(0x7f00000001c0)="911302d0c8efe6ca6ba5b654a0b426035feb627af618e1f9aa5d478360a28be11a25e81e3162d92c1d4c6662ec19c2751e4b01328b35a265ca12ff21", 0x3c}, {&(0x7f0000000200)="2b4613e0b97c7af6ec90dccdb6c8be99a2f24fa312b523356ef0bfebe6acccb8b268ee35fd300a6815f33190ea0f38722e0f16090de46496a0168a08721d0feff79c5ff31091885216926946b5a9f19d129a9ac2236691c0c7180ed579b983eae1c2b1479d9d8dd401581bf5f36fbf3a325a925fb49f7201e950cc9559b8277628", 0x81}, {&(0x7f00000002c0)="095f22c2654d97a05ce2d2616a3e49c7a6f2612337f67e01d009d6", 0x1b}, {&(0x7f0000000300)="6607eec566c2b0204506fb38159335748776b2e6f7e17d60dff54e01a97837de8f27fe675e960f3fbe88b33963e2ebc7cb476c09192441e1a064b8cff13e56dc0266d6542ed36ee7f93d575e40b96fbdc1e735568c3c94cea3103dd6afebd2cceb14439a42f31ffc85", 0x69}, {&(0x7f0000000380)="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", 0x1000}], 0x8)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4c00000000000000]}]}})

05:52:40 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000002740)={0xa, 0x0, 0x0, @dev, 0x4}, 0x79)
sendmmsg(r1, &(0x7f0000007e00), 0x136a88c8311572c, 0x11)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@fragment, 0x8)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:40 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x2, 0x0})

05:52:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290178002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:40 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x1e)
fanotify_init(0x1, 0x40000)
r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x81, 0x101c00)
ioctl$TIOCCBRK(r1, 0x5428)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2002, 0x0)
write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7)

[ 1588.699393] binder: undelivered TRANSACTION_ERROR: 29189
[ 1588.743996] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7000000]}]}})

05:52:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291d01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1588.858738] binder: 1435:1436 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1588.894002] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1588.959397] binder_alloc: binder_alloc_mmap_handler: 1435 20001000-20004000 already mapped failed -16
05:52:40 executing program 4:
r0 = accept(0xffffffffffffffff, &(0x7f0000000240)=@nfc, &(0x7f00000002c0)=0x80)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000300)=0x8)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x200000, 0x0)
ioctl$VIDIOC_ENUMSTD(r1, 0xc0485619, &(0x7f0000000200)={0x6, 0x20007, "388b0467320fbac1ae3bf80a51e83ce0430138bf5d6eba56", {0xffffffffffffffff, 0x31}, 0xffff})
r2 = socket$netlink(0x10, 0x3, 0xffffffffffffffff)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x200012000, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f00000000c0))
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)=<r4=>0x0)
move_pages(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f0000000140)=[0xffffffff, 0x7fffffff, 0x7e7, 0x8, 0x3, 0x3, 0x100, 0x5000000000000, 0x5, 0x55e8ffea], &(0x7f00000001c0), 0x4)
r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x80c00)
setns(r5, 0x20000000)

05:52:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6c000000]}]}})

[ 1589.004792] binder: BINDER_SET_CONTEXT_MGR already set
[ 1589.010112] binder: 1435:1436 ioctl 40046207 0 returned -16
[ 1589.041669] binder_alloc: 1435: binder_alloc_buf, no vma
05:52:40 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a002002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1589.093104] binder: 1435:1453 transaction failed 29189/-3, size 0-0 line 2973
[ 1589.097419] binder: 1435:1459 BC_FREE_BUFFER u0000000020001000 no match
[ 1589.107576] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1589.146941] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1589.161411] binder: release 1435:1436 transaction 907 out, still active
[ 1589.175091] binder: undelivered TRANSACTION_COMPLETE
[ 1589.198817] binder: send failed reply for transaction 907, target dead
05:52:40 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000]}]}})

[ 1589.323041] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297a01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:52:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0xfdfdffff00000000, 0x0})

05:52:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x300]}]}})

05:52:41 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1589.383613] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1589.477647] binder: 1477:1479 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1589.498408] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900bf002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1589.527587] binder_alloc: binder_alloc_mmap_handler: 1477 20001000-20004000 already mapped failed -16
[ 1589.575936] binder: BINDER_SET_CONTEXT_MGR already set
05:52:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x380, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000080)={0x2, {0x0, 0x899}})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4800000000000000]}]}})

[ 1589.597980] binder: 1477:1479 ioctl 40046207 0 returned -16
[ 1589.627130] binder_alloc: 1477: binder_alloc_buf, no vma
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902d7002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1589.650806] binder: 1477:1500 transaction failed 29189/-3, size 0-0 line 2973
[ 1589.672275] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1589.683565] binder: 1477:1492 BC_FREE_BUFFER u0000000020001000 no match
05:52:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x400000000000000]}]}})

[ 1589.711929] binder: release 1477:1479 transaction 910 out, still active
[ 1589.736981] binder: undelivered TRANSACTION_COMPLETE
[ 1589.742217] binder: send failed reply for transaction 910, target dead
05:52:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x2000000000000000, 0x0})

05:52:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=<r1=>0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000100))

05:52:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000080)={0x0, @reserved})
prctl$PR_GET_THP_DISABLE(0x2a)

[ 1589.823038] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29001b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1589.919561] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1589.933622] binder: 1522:1527 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:41 executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={<r2=>0x0, 0x80000, 0xffffffffffffff9c})
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0)
r4 = fcntl$dupfd(r3, 0x406, 0xffffffffffffffff)
clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff)
chroot(&(0x7f00000002c0)='./file0\x00')
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000040)={0x0, 0xe8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000280))
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00@\x00', 0xffffffffffffffff, 0xfeffffff00000000}, &(0x7f0000001fee)="520972697374e363757367725669643a4465", 0x0)
getresgid(&(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000180))
ioctl$DRM_IOCTL_AGP_INFO(0xffffffffffffffff, 0x80386433, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
exit(0x0)
socket$netlink(0x10, 0x3, 0xf)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r5})

[ 1589.974886] binder_alloc: binder_alloc_mmap_handler: 1522 20001000-20004000 already mapped failed -16
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290012002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x401, 0x0)
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRES32=r0], @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYBLOB="343101b64b05505c49afdaa756ac61859098bb34dfb5c62dec0f1826cc24e706945410afc7b9cadda43753d3d7943248b8f077ae2b668870ae6467c047e478b644c0de2b2857176d7c3ae23e1e4792c1a99dd03538b58db107b3a49817672dc41928bd99591daef0debe5526925a26f082b31988dcde59be2fbe51d694e0b3d423638da07e449fff8897b8a85526588ae72b707e79048f"]])
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@loopback}}, &(0x7f0000000240)=0xe8)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', r2})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1590.016620] binder: BINDER_SET_CONTEXT_MGR already set
[ 1590.030186] binder: 1522:1527 ioctl 40046207 0 returned -16
[ 1590.048173] binder_alloc: 1522: binder_alloc_buf, no vma
05:52:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x48000000]}]}})

[ 1590.063294] binder: 1522:1544 transaction failed 29189/-3, size 0-0 line 2973
[ 1590.072340] binder: 1522:1550 BC_FREE_BUFFER u0000000020001000 no match
[ 1590.080045] binder: release 1522:1527 transaction 913 out, still active
[ 1590.109944] binder: undelivered TRANSACTION_COMPLETE
05:52:41 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x2000000, 0x0})

05:52:41 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1590.150617] binder: send failed reply for transaction 913, target dead
[ 1590.176079] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:41 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297200002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:41 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x20d, 0x0)
setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x800, 0x10000}, 0x2)

05:52:41 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4000000]}]}})

[ 1590.319025] binder_alloc: binder_alloc_mmap_handler: 1570 20001000-20004000 already mapped failed -16
[ 1590.332761] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:42 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4800]}]}})

[ 1590.367087] binder: BINDER_SET_CONTEXT_MGR already set
[ 1590.409307] binder: 1570:1571 ioctl 40046207 0 returned -16
[ 1590.468513] binder_alloc: 1570: binder_alloc_buf, no vma
[ 1590.476068] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1590.493804] binder: 1570:1591 BC_FREE_BUFFER u0000000020001000 no match
[ 1590.534352] binder: release 1570:1571 transaction 916 out, still active
[ 1590.545360] binder: send failed reply for transaction 916, target dead
05:52:42 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x3f00]}]}})

05:52:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f200002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:42 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009}, 0x2c)
unshare(0x20400)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:42 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:42 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x48000000, 0x0})

[ 1590.888771] binder_thread_write: 1 callbacks suppressed
[ 1590.888794] binder: 1602:1608 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1590.897536] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="292a01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1590.965387] binder_alloc: binder_alloc_mmap_handler: 1602 20001000-20004000 already mapped failed -16
05:52:42 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x74]}]}})

[ 1591.021282] binder: BINDER_SET_CONTEXT_MGR already set
05:52:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000080)="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")
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1591.045530] binder: 1602:1608 ioctl 40046207 0 returned -16
[ 1591.070434] binder_alloc: 1602: binder_alloc_buf, no vma
[ 1591.086624] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:42 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299200002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1591.120910] binder: 1602:1630 BC_FREE_BUFFER u0000000020001000 no match
05:52:42 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@local, @empty, r2}, 0xc)
setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000000c0)={@local, r2}, 0x14)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1591.194884] binder: release 1602:1608 transaction 919 out, still active
[ 1591.208176] binder_transaction: 1 callbacks suppressed
[ 1591.208195] binder: 1602:1624 transaction failed 29189/-3, size 0-0 line 2973
[ 1591.220935] binder_release_work: 1 callbacks suppressed
[ 1591.220941] binder: undelivered TRANSACTION_COMPLETE
05:52:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x700]}]}})

[ 1591.247834] binder: send failed reply for transaction 919, target dead
05:52:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290257002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x20000000, 0x0})

[ 1591.309456] binder_release_work: 4 callbacks suppressed
[ 1591.309463] binder: undelivered TRANSACTION_ERROR: 29189
[ 1591.370527] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1591.430893] binder: 1650:1652 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1591.478990] binder: BINDER_SET_CONTEXT_MGR already set
[ 1591.496557] binder: 1650:1656 transaction failed 29189/-3, size 0-0 line 2973
[ 1591.513512] binder: 1650:1654 ioctl 40046207 0 returned -16
[ 1591.520019] binder: 1650:1656 BC_FREE_BUFFER u0000000020001000 no match
[ 1591.528765] binder: release 1650:1652 transaction 922 out, still active
[ 1591.554881] binder: undelivered TRANSACTION_COMPLETE
[ 1591.560126] binder: send failed reply for transaction 922, target dead
[ 1591.588016] binder: undelivered TRANSACTION_ERROR: 29189
05:52:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:43 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x16)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x100000000000012c)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x181000, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4)

05:52:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6800000000000000]}]}})

05:52:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902b9002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x600, 0x0})

[ 1591.727051] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1591.755824] binder: 1668:1672 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290022002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x100000000000000]}]}})

[ 1591.816460] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1591.816493] binder_alloc: binder_alloc_mmap_handler: 1668 20001000-20004000 already mapped failed -16
05:52:43 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:43 executing program 4:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0)
recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000002600)=@vsock, 0x80, &(0x7f0000000040)=[{&(0x7f0000002680)=""/147, 0x93}], 0x1, 0x0, 0xffffffffffffffa3, 0x8}, 0x20)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000002580)={0x2, 0xffffffffffffff9c})
writev(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)="567dbb11452bf0b04caebd96b153a4db36e0cfb95e52be72641e"}, {&(0x7f00000025c0)="07554a9d9ff35be6a6740a96cec44c2f6567"}, {&(0x7f0000000100)="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", 0x2e4}, {&(0x7f0000001100)="e31a0cd923a377f5d1f82a2c9a8f00e85ce5d9067766a65ea01af600756e4ee66bbd38fb6f872237df01e7d0621955b23ae9ae14de7f9ede691f7d734663836d221287aa5d3e4a973bb12c20c72cc30351faf4639bc38643b9d7e31617c1bf3dd961a723ea3dcbe31cafa3599a517634665147e2eb67ff3c5adec11f739c95f14ff978"}, {&(0x7f00000011c0)="e6cd23a4934049b5f33c83645d9439451164b6395aed180768330978191f84f32a47a82f448117d8d96bc8662e5e097d670234bd43b7cf459d5081290a74b26fcf181bc8132ddceb8d3c973c450d957e65beca60c9d5fbb45213b3dc896480c1810494d9e71f95f38cd644926a2be1fffbcc2e9a91e0cfe40d583a1038eb13db4e8e3571da52b1a5e35938343b248f9818184571dc98f38754ce56b0b9"}, {&(0x7f0000001280)="ae3a57d3dcea787f3388d33c1169ce189b415e1764109a15116b3ba6d71b366172c1db23c517eed95964e44f285ecefe75824f6f83f85df4463f7a8179d7d6f7020a154652673e1d358b8341f6b81bfe5c989f9201e92c605d93da49771e8311b6e20d41199d478a0eb3dc308f8802bcf77758d091f3b1e7a565bc461408bd7284d9"}, {&(0x7f0000001340)="743557cbdd1f172807c03bbe612a1597a4a478b381cd3e013c224de46799f68a779b22dbd14805062a193345282f93636cea99160a2b85a14bbf3ace1c9c6096d6bc4a42f34a66c6305ecf84f4c5e6f30163822a4b806ded9cfd1d2cd14bce7b91c9cde75013c9e56e9825a6e2a19969382b446c5d13908a228cad948b12a3f1fc3d3c66805735d9628758e39d1293fb0d025f2f3854346f3d0b076a2cc120d237cca8743952349922b90ad5551d3c0399b15d3c7ff1294c02dff4"}, {&(0x7f0000001400)="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"}, {&(0x7f0000002400)="bd8201b7e8a41a5ed36a65d7cdd744f135c9996c04361a17bddc6f89020000005afaa18d8f2429391b46e59653f5b18359c70b77f98e086b31dd010f1e4fd26f"}, {&(0x7f0000002480)="4335fed2172d4537bf43"}], 0x10000000000003b1)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000002440)={0x5, 0x9, 0x8000000000000008, 0x7f, 0x2})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000002740)=[@timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x7)

[ 1591.908718] binder: BINDER_SET_CONTEXT_MGR already set
[ 1591.928319] binder: 1668:1672 ioctl 40046207 0 returned -16
[ 1591.933057] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29e800002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:43 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x5000000]}]}})

[ 1591.972596] binder_alloc_new_buf_locked: 1 callbacks suppressed
[ 1591.972606] binder_alloc: 1668: binder_alloc_buf, no vma
[ 1592.012058] binder: 1668:1680 BC_FREE_BUFFER u0000000020001000 no match
05:52:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1592.040740] binder: 1668:1695 transaction failed 29189/-3, size 0-0 line 2973
[ 1592.076570] binder: send failed reply for transaction 925 to 1668:1672
05:52:43 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x15)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:43 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901b8002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1592.105551] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1592.118454] binder: undelivered TRANSACTION_COMPLETE
[ 1592.142289] binder: undelivered TRANSACTION_ERROR: 29189
05:52:43 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40000000000010)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040))
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000000, 0x4013, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03630840a1aee2333bb58065000051cba13065f5ebd3851dac78356a32a2b20ba0e25a4c996661ddd787b5cf2a0f2bbeb820c7717133a6f9dafdcc612c9a7447449f8801ab45fe188cdc6acd72745d90985e65a36f18b5310eb27b714116495c978ffca78eb90583dd5c2768f9a07378db6d996a852f474c1c8e7371313ad32aec98b7afaf827c4404d5d8504a9af952a0fb27ae02f28b6f6ef21bcb154e3a2367046102", @ANYRES64=r3], 0x0, 0x0, 0x0})

[ 1592.201125] binder: undelivered TRANSACTION_ERROR: 29189
05:52:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x3f000000]}]}})

05:52:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1592.268096] binder_alloc: 1713: binder_alloc_buf, no vma
05:52:44 executing program 4:
r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0x400000)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20004080)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000080)=0x16, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
fcntl$dupfd(r3, 0x406, r0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900f6002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1592.327692] binder: 1713:1714 transaction failed 29189/-3, size 0-0 line 2973
[ 1592.365861] binder_alloc: binder_alloc_mmap_handler: 1713 20001000-20005000 already mapped failed -16
[ 1592.400471] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1592.528083] binder: 1713:1734 BC_FREE_BUFFER u6580b53b33e2aea1 no match
[ 1592.606643] binder_alloc: binder_alloc_mmap_handler: 1713 20001000-20004000 already mapped failed -16
[ 1592.626620] binder: BINDER_SET_CONTEXT_MGR already set
[ 1592.632179] binder_alloc: binder_alloc_mmap_handler: 1713 20001000-20005000 already mapped failed -16
[ 1592.641869] binder: 1713:1714 ioctl 40046207 0 returned -16
[ 1592.645429] binder_alloc: 1713: binder_alloc_buf, no vma
[ 1592.648249] binder: undelivered TRANSACTION_ERROR: 29189
[ 1592.658920] binder: 1713:1719 transaction failed 29189/-3, size 0-0 line 2973
[ 1592.666565] binder: undelivered TRANSACTION_ERROR: 29189
05:52:44 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:44 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
getresuid(&(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100), &(0x7f0000000140))
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@remote}}}, &(0x7f0000000180)=0xe8)
setresuid(r3, r4, r5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x3]}]}})

05:52:44 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)
syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1ff, 0x400)

05:52:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29007d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1592.780770] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1592.794867] binder: 1740:1741 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29025b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1592.873750] binder_alloc: binder_alloc_mmap_handler: 1740 20001000-20004000 already mapped failed -16
05:52:44 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x4c]}]}})

05:52:44 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x602400, 0x0)
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080))
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

[ 1592.918832] binder: BINDER_SET_CONTEXT_MGR already set
[ 1592.924132] binder: 1740:1741 ioctl 40046207 0 returned -16
05:52:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1593.009216] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1593.071181] binder_alloc: 1740: binder_alloc_buf, no vma
05:52:44 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900eb002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:44 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1593.112864] binder: 1740:1773 transaction failed 29189/-3, size 0-0 line 2973
[ 1593.159830] binder: 1740:1758 BC_FREE_BUFFER u0000000020001000 no match
[ 1593.244335] binder: release 1740:1741 transaction 931 out, still active
[ 1593.251795] binder: undelivered TRANSACTION_COMPLETE
[ 1593.284740] binder: send failed reply for transaction 931, target dead
[ 1593.294361] binder: undelivered TRANSACTION_ERROR: 29189
05:52:45 executing program 4:
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x7fffffff}, 0x8, 0x0)
write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "b2"}, 0x5)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x48]}]}})

05:52:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296602002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="db73974b"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x842, 0x0)
ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000080)={0x0, @ctrl={0x0, 0x0, @value64}})
signalfd4(r1, &(0x7f0000000000)={0x1f}, 0x8, 0x80000)

05:52:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:45 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1593.423891] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1593.432231] binder: 1791:1793 unknown command 1268216795
[ 1593.453638] binder: 1791:1793 ioctl c0306201 20007000 returned -22
05:52:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295502002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40800)
ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x5, 0x0, [{0x0, 0x8, 0xfffffffffffffffc, 0x5, 0x1f}, {0xc0000000, 0x3, 0x1, 0xffffffff, 0x4}, {0x0, 0x2, 0x2, 0x6, 0x7}, {0x0, 0x1f, 0x1ff, 0x8bc, 0x7ff}, {0x40000001, 0x81, 0x80, 0x44, 0x4}]})
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000000", 0x29}], 0x1)

05:52:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x3000000]}]}})

[ 1593.493229] binder: 1791:1793 BC_FREE_BUFFER u0000000020001000 no match
[ 1593.520704] binder_alloc: binder_alloc_mmap_handler: 1791 20001000-20004000 already mapped failed -16
05:52:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1593.561948] binder: BINDER_SET_CONTEXT_MGR already set
[ 1593.575586] binder: 1791:1804 unknown command 1268216795
[ 1593.590564] binder: 1791:1793 ioctl 40046207 0 returned -16
[ 1593.603848] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902af002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1593.613338] binder: 1791:1804 ioctl c0306201 20007000 returned -22
[ 1593.624732] binder: 1791:1816 BC_FREE_BUFFER u0000000020001000 no match
05:52:45 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7a000000]}]}})

05:52:45 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="290000002000190f00003fffffffda060200000600e801000000000000000c00ea1100000b05000000", 0x29}], 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)

05:52:45 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x2)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x62, 0x0, &(0x7f00000001c0)="221fcc5f7b7d3d21c22bd4a3860291858b393b7d0d234d0e08031de9d1bdf4c095a6cb2736fba69e788b833a5258d1ac4e77e9f4454fe1d20c921b75a5819b9883be5c262aaf918a331f3b093510fe6c19c4e9b758479ddca1916a0594eb471b5135"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000300)={0xffffffff, 0x20, 0xfff000000000000})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0363084074f4f9bb5dbe3790ad02d7e1e0a54fc6c9d52ff55c48cb189e420175e7baf216c52b91a53b1485a2af3ed46ae29cfe0b448fabfa2639de7949f31b832e9949241aa7032bbcaf7676fab7d5448ced76c88eca3ad06eb7fdd9495ce881c32c30863b464cbca12e4542c4a371c855d8094bbf66f985544b10747f19924d3dd3f1ab8f108f7fd12a97742d3af88c68f8f9f6972e616ad64a347e9b6fc47af8fab9b080ee8746917bc19405df99f68f4800f073d0bd2d65d2", @ANYRES64=r2], 0x0, 0x0, 0x0})

05:52:45 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:45 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901a7002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1593.769403] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1593.791177] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'.
05:52:45 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="990040000000000000000000"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
getresuid(&(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080), &(0x7f00000000c0))
ioprio_get$uid(0x3, r3)

[ 1593.836603] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'.
[ 1593.931681] binder: 1841:1842 unknown command 4194457
[ 1593.955932] binder: 1841:1842 ioctl c0306201 20007000 returned -22
[ 1593.996909] binder: 1841:1842 BC_FREE_BUFFER u0000000020001000 no match
[ 1594.008715] binder_alloc: binder_alloc_mmap_handler: 1841 20001000-20004000 already mapped failed -16
[ 1594.030952] binder: BINDER_SET_CONTEXT_MGR already set
[ 1594.036762] binder: 1841:1842 ioctl 40046207 0 returned -16
[ 1594.037625] binder: 1841:1846 unknown command 4194457
[ 1594.047809] binder: 1841:1846 ioctl c0306201 20007000 returned -22
[ 1594.054334] binder: 1841:1846 BC_FREE_BUFFER u0000000020001000 no match
05:52:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x2000000]}]}})

05:52:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29cb01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c492f40c507b16356e20d10103f668b0894dd11313fc336e374453a4cd5d5405bc1300a74ebf6c3109be8ccf"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
ppoll(&(0x7f0000000040)=[{r0, 0x2000}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)={0x101}, 0x8)

05:52:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1594.358826] binder: 1855:1856 unknown command 217354948
[ 1594.371760] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29e801002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1594.415467] binder: 1855:1856 ioctl c0306201 20007000 returned -22
05:52:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1594.465429] binder: 1855:1864 BC_FREE_BUFFER u0000000020001000 no match
05:52:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x74000000]}]}})

[ 1594.521945] binder_alloc: binder_alloc_mmap_handler: 1855 20001000-20004000 already mapped failed -16
[ 1594.560706] binder: BINDER_SET_CONTEXT_MGR already set
05:52:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290122002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1594.585881] binder: 1855:1856 ioctl 40046207 0 returned -16
05:52:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1594.626932] binder: 1855:1864 unknown command 217354948
[ 1594.650655] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x500]}]}})

05:52:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295701002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1594.698823] binder: 1855:1864 ioctl c0306201 20007000 returned -22
05:52:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1594.821304] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:46 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffc)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
exit_group(0x0)

05:52:46 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:46 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294201002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:46 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x68]}]}})

05:52:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1595.259138] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1595.271756] binder: 1904:1917 transaction failed 29189/-22, size 0-0 line 2834
05:52:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290060002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x6000000000000000]}]}})

05:52:47 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x800)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x313000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0xfffffffffffffffe)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x0)

[ 1595.434958] binder: undelivered TRANSACTION_ERROR: 29189
[ 1595.486049] binder: 1928:1930 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1595.499910] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:47 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29014e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1595.549610] binder_alloc: binder_alloc_mmap_handler: 1928 20001000-20004000 already mapped failed -16
05:52:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x7a00000000000000]}]}})

[ 1595.614426] binder_alloc: 1928: binder_alloc_buf, no vma
05:52:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1595.670226] binder: BINDER_SET_CONTEXT_MGR already set
[ 1595.685127] binder: 1928:1936 transaction failed 29189/-3, size 0-0 line 2973
[ 1595.726086] binder: release 1928:1930 transaction 938 out, still active
[ 1595.736106] binder: 1928:1941 ioctl 40046207 0 returned -16
[ 1595.742331] binder: undelivered TRANSACTION_COMPLETE
[ 1595.743338] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d901002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1595.774452] binder: send failed reply for transaction 938, target dead
05:52:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x48]}]}})

05:52:47 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:47 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:47 executing program 3:
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x200, 0x0)
setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000180)=0x3, 0x4)
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163f86d901610bd"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x10, 0x30, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0)
setsockopt(r4, 0x101, 0xfffffffffffffffd, &(0x7f0000000040)="0e321ebffa3562a1704354494b40169e0b41f5182f529d38b7648fc6cbd473c0503d1529428a51fd860c474c9162a549704128f0e3b55ddc252f54872ee1464b7f19e52324fe09db488314519df72e04b800b562f938beadef39aeae4eb452216860bd7a600657dffffb22377941389e672dab83c7211ff5b8fc5ad3fe51c91c8e2b5f719203902daa507b3841ae0a1c7599faac2db488a382367c253370dd4dbe", 0xa1)

[ 1595.888246] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1595.912516] binder: undelivered TRANSACTION_ERROR: 29189
05:52:47 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4c]}]}})

05:52:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1596.014468] binder: 1974:1975 unknown command 1844994833
[ 1596.042879] binder: 1974:1975 ioctl c0306201 20007000 returned -22
[ 1596.095162] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1596.103330] binder_alloc: binder_alloc_mmap_handler: 1974 20001000-20004000 already mapped failed -16
[ 1596.136744] binder: 1974:1983 unknown command 1844994833
[ 1596.139105] binder: BINDER_SET_CONTEXT_MGR already set
[ 1596.142331] binder: 1974:1983 ioctl c0306201 20007000 returned -22
[ 1596.165243] binder: 1974:1975 ioctl 40046207 0 returned -16
[ 1596.175252] binder_thread_write: 2 callbacks suppressed
[ 1596.175284] binder: 1974:1985 BC_FREE_BUFFER u0000000000000000 no match
05:52:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297c00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x48000000]}]}})

05:52:48 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0))
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = semget$private(0x0, 0x5, 0xa0)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x4, 0x5])
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

[ 1596.650042] binder: 1997:1999 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1596.676527] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="296702002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1596.725350] binder: BINDER_SET_CONTEXT_MGR already set
05:52:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socket$netlink(0x10, 0x3, 0x8000000004)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1596.752850] binder_alloc: 1997: binder_alloc_buf, no vma
05:52:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x68]}]}})

05:52:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1596.795466] binder: 1997:1999 ioctl 40046207 0 returned -16
[ 1596.822448] binder: 1997:2006 transaction failed 29189/-3, size 0-0 line 2973
[ 1596.822808] binder: 1997:2010 BC_FREE_BUFFER u0000000020001000 no match
[ 1596.888542] binder: release 1997:1999 transaction 942 out, still active
[ 1596.905073] binder: undelivered TRANSACTION_COMPLETE
[ 1596.919478] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:48 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:48 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902a9002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1596.945075] binder: send failed reply for transaction 942, target dead
05:52:48 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x1033, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634800754ef4f773c0de"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES64=r2], 0x0, 0x0, 0x0})
r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x80)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x250, 0xc0, 0x250, 0x188, 0x188, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x60000000}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x1, @rand_addr=0x7, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xc34, 0xffffffff, @multicast2, 0x4e21}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @common=@inet=@ecn={0x28, 'ecn\x00', 0x0, {0x21, 0x20, 0x60}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2d}}}, {{@uncond, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x23, @rand_addr=0x3, 0x4e22}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x520)

05:52:48 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0xfeedcafe]}]}})

[ 1597.005026] binder: undelivered TRANSACTION_ERROR: 29189
05:52:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1597.081651] binder: 2029:2030 unknown command 4743953
[ 1597.099652] binder: 2029:2030 ioctl c0306201 20007000 returned -22
[ 1597.144379] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1597.172611] binder: 2029:2030 unknown command 8
[ 1597.187194] binder: 2029:2030 ioctl c0306201 200002c0 returned -22
[ 1597.213436] binder: BINDER_SET_CONTEXT_MGR already set
[ 1597.219272] binder: 2029:2037 ioctl 40046207 0 returned -16
[ 1597.225487] binder: 2029:2038 unknown command 4743953
[ 1597.230950] binder: 2029:2038 ioctl c0306201 20007000 returned -22
[ 1597.237933] binder: 2029:2037 unknown command 8
[ 1597.242800] binder: 2029:2037 ioctl c0306201 200002c0 returned -22
05:52:49 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000b05000011", 0x29}], 0x1)

05:52:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900ae002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:49 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1})

05:52:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x60]}]}})

05:52:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x4000)
sendmsg$rds(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/184, 0xb8}], 0x1, 0x0, 0x0, 0x880}, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)="636772807f700023dfbf4d21cfeffad1cf2711ce8a0c7da241017f3e4ace078d80b356c8c39178c5076560b80f64459407526c76d5933c66b221d77804b4d08f3dddbdd651bf820c2e09548bddd4c708f66b2b054ee1d2b777381fa99be1e48771f03f458b8eb9181ad5b4fc912318455cb9cbd98512cc0970b01aa41964599d9a000000faff00000000e3ab5dfde00742503af753127a8ad8287d068c0d70b2416d4abe539b237f3598969b4575287528eef022b6eaa2ba7f6ac44b7c318a797dd363115de56900677373b4c42006f65cb174030bcb3bbe52feb1a5cc000000000000000000")
ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000002000/0x2000)=nil, 0x2000})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

05:52:49 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

[ 1597.527737] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1597.559614] binder: 2049:2050 unknown command 0
05:52:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1})

[ 1597.577091] binder: 2049:2050 ioctl c0306201 20007000 returned -22
[ 1597.606961] binder: 2049:2050 BC_FREE_BUFFER u0000000020001000 no match
[ 1597.620942] binder_alloc_mmap_handler: 1 callbacks suppressed
05:52:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a800002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1597.620958] binder_alloc: binder_alloc_mmap_handler: 2049 20001000-20004000 already mapped failed -16
[ 1597.663834] binder: BINDER_SET_CONTEXT_MGR already set
05:52:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x20000000]}]}})

[ 1597.678524] binder: 2049:2050 ioctl 40046207 0 returned -16
[ 1597.720205] binder: 2049:2071 unknown command 0
[ 1597.745445] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1597.753353] binder: 2049:2071 ioctl c0306201 20007000 returned -22
05:52:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290026002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1597.810164] binder: 2049:2058 BC_FREE_BUFFER u0000000020001000 no match
05:52:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6]}]}})

05:52:49 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000d, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

[ 1597.914991] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1597.948614] binder: 2083:2084 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:49 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297d0c002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:49 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6000000000000000]}]}})

[ 1597.996986] binder_alloc: binder_alloc_mmap_handler: 2083 20001000-20004000 already mapped failed -16
[ 1598.095596] binder_alloc: 2083: binder_alloc_buf, no vma
[ 1598.101269] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.114828] binder: 2083:2084 ioctl 40046207 0 returned -16
[ 1598.128156] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1598.131928] binder: 2083:2085 transaction failed 29189/-3, size 0-0 line 2973
[ 1598.147146] binder: 2083:2094 BC_FREE_BUFFER u0000000020001000 no match
[ 1598.155667] binder: release 2083:2084 transaction 947 out, still active
[ 1598.162479] binder: undelivered TRANSACTION_COMPLETE
[ 1598.174352] binder: send failed reply for transaction 947, target dead
[ 1598.196368] binder: undelivered TRANSACTION_ERROR: 29189
05:52:50 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x0, 0x7fffffff, 0x1})

05:52:50 executing program 4 (fault-call:13 fault-nth:0):
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900ca002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7400]}]}})

05:52:50 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
quotactl(0x1000, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000900)="b3953b6324374e987efe0d899ed59a5eff1554e761e7908b639025f76f154f895790ced95cdbb8356e6bce2483e6248025d8507b09a5319a6af4c8c76fc5086aa24500b7a9485eb9bf557b03c528069f73da61dde177883bd41157a72c340d3fff4d76ded092376b6e8af7fa7171b165a9be427319f268b9e6202327656eeea71d789132a816515ac404a8499f5cfa0bf497c01a9945d072e645b3bc06a7e9e6d90e3a041f9e0aeeb08a827ac7330e8ef8f0a32fdb4ddbb39a1c49b401cda6ccd95bbc490ed61297d8a9a21cd2b5941b70843bf6ad607eda3cadcb7e")
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000007c0))
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fbc45ff810040010000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000414900000004fcff", 0x58}], 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'lo\x00', 0x5000})
sendfile(r0, r1, &(0x7f0000000240), 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xe}, 0x40, r2})

05:52:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x0)
accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f00000000c0)={0x3, 0x3, 0xfffffffffffffffd, 0x3, 0x81})
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

[ 1598.464797] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1598.487083] binder: 2105:2107 ioctl 4c00 5 returned -22
[ 1598.509712] binder: 2105:2107 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4]}]}})

05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="291600002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1598.557302] binder_alloc: binder_alloc_mmap_handler: 2105 20001000-20004000 already mapped failed -16
05:52:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1598.602802] binder: BINDER_SET_CONTEXT_MGR already set
[ 1598.631528] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1598.641317] binder: 2105:2107 ioctl 40046207 0 returned -16
05:52:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000000000000]}]}})

[ 1598.675950] binder_alloc: 2105: binder_alloc_buf, no vma
[ 1598.695522] binder: 2105:2113 transaction failed 29189/-3, size 0-0 line 2973
05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f901002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1598.722525] binder: 2105:2107 ioctl 4c00 8 returned -22
05:52:50 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1598.769343] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1598.786079] binder: release 2105:2107 transaction 950 out, still active
[ 1598.809238] binder: undelivered TRANSACTION_COMPLETE
[ 1598.832170] binder: send failed reply for transaction 950, target dead
05:52:50 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bind$netlink(r0, &(0x7f0000000100), 0xc)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00')
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d880ed743e781945906e1cc89525fd4883a61f88cef5a3a498c63bfacfa17edb96929422beef824d93b2ecb809d61bdd8f21bdb280448b0243dd404359fe77f6628fa991fe790893359e0e76527ef066ed3710817919d4008773632cffb7a37e59a79885f4eb044ee15c096e9c4605d62d772b6f8294606d544ef03a161b60b19759002e3d607fbcbd839cf6d7e79c916df793550206c2b1689809e0e7e59047c0abf0ca561822ccfaefeecb57e3ce8f", @ANYRES16=r2, @ANYBLOB="0106000000000000000003000000"], 0x14}}, 0x0)

05:52:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4c000000]}]}})

05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902b3002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:50 executing program 4:
r0 = socket$bt_hidp(0x1f, 0x3, 0x6)
fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000180)={0x0, 0xfb, 0x9f, 0x5, 0x20, "f7fe527145a48738c7f82b7c80db0c1c", "6838f92ab207f8e4047032b9c2cb3a42b02953701decb60078b93c23072832475c2dd659dce4f75c5bbdd311a70fb60e2b8a1ab42f08773f54b938760da2cddeffd575ef3aa22486686b40b03b6bc1aa6c6d7290def0b2634bbde384b247b628584d97067368c0c95c65be3a6606ff461e48ac346818fe8480d5cad8b8829242c7c808e2e8c39e79646c"}, 0x9f, 0x3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1598.929093] binder: undelivered TRANSACTION_ERROR: 29189
05:52:50 executing program 1:
r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1ff, 0x40)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140), &(0x7f0000000080)=0xc)
getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001c00)={@dev}, &(0x7f0000001c40)=0x14)
accept(r0, &(0x7f00000001c0)=@can, &(0x7f0000000100)=0xffffffffffffffaa)
sendmmsg(r0, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000015c0)="4e1a661dd9fed7ff3ad32d132ee7be191ef06b967b613bda624edbf30438a077f8f114549cd291aef318ad8d7c43632928c21b7811e402e6c354083f7114ab201e81dc", 0x43}], 0x1, &(0x7f0000001680), 0x0, 0x8004}, 0x5}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002300)="2b41e4017b60b55c03d5baf69309af526d9924237661906a95c18925e983b41b95ae727bd3b92ea5f05564fd5614d73c88da4ba55b38994915211d40978b109be40031aeba998c0b147008ca29eec3525c", 0x51}], 0x1, &(0x7f0000002440), 0x0, 0x40000}, 0x1}, {{&(0x7f0000005ac0)=@pppoe={0x18, 0x0, {0x1, @empty, 'bond_slave_1\x00'}}, 0x80, &(0x7f0000006b80)=[{&(0x7f0000005b80)="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", 0x1000}], 0x1, &(0x7f0000006bc0), 0x0, 0x4000000}, 0x2}, {{&(0x7f0000008480)=@ethernet={0x7}, 0x80, &(0x7f0000008580)=[{&(0x7f0000008540)="ba7fc4f3551a042311aca774f9f25c2e", 0x10}], 0x1, &(0x7f00000085c0), 0x0, 0x800}, 0x9}], 0x4, 0x8000)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x0, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x4, 0x7, 0x2e, 0x7f, 0xf6ca})
ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="01003a1e2410"})

05:52:50 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0)
sendto$unix(r3, &(0x7f0000000040)="139876d0f682ac0d68797b67755be48e3f5b359f7fc9f541920b2e2c333937c7df3a10a781d8b25890cd1038e137a3198f9eafa34a910cc5af6c1626b50509ef5e07e1ef1c151cb879056fe8b72d431dfb6c25e2b8b310950bc4d9689e929979a353e505849a57d52aa58e30d3f1bfaecad11f1cb7ddf06a6114b94070007b600af14a989f25db9a52cdd4ba4edf6b40fe5e907b217d357851338e83f9ad135ce008df71e7e06abe4dccdb61f09997", 0xaf, 0x20008000, 0x0, 0x0)

[ 1599.025327] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29027f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000]}]}})

[ 1599.107813] binder: 2155:2156 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1599.169096] binder_alloc: binder_alloc_mmap_handler: 2155 20001000-20004000 already mapped failed -16
[ 1599.180747] binder: BINDER_SET_CONTEXT_MGR already set
[ 1599.186799] binder: 2155:2156 ioctl 40046207 0 returned -16
[ 1599.192826] binder_alloc: 2155: binder_alloc_buf, no vma
[ 1599.199049] binder: 2155:2163 transaction failed 29189/-3, size 0-0 line 2973
05:52:50 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901ff002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1599.213968] binder: 2155:2163 BC_FREE_BUFFER u0000000020001000 no match
[ 1599.234114] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1599.253312] binder: release 2155:2156 transaction 953 out, still active
05:52:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901f1002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x100)
ioctl$TCXONC(r1, 0x540a, 0x9)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x11, r0, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

[ 1599.279312] binder: undelivered TRANSACTION_COMPLETE
05:52:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}]}})

[ 1599.305464] binder: undelivered TRANSACTION_ERROR: 29189
[ 1599.324104] binder: send failed reply for transaction 953, target dead
[ 1599.382136] binder: 2176:2178 transaction failed 29189/-22, size 0-0 line 2834
[ 1599.392245] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1599.430123] binder: 2176:2181 transaction failed 29189/-22, size 0-0 line 2834
[ 1599.440839] binder: undelivered TRANSACTION_ERROR: 29189
[ 1599.478307] binder: undelivered TRANSACTION_ERROR: 29189
05:52:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000040)={0x7b, 0x0, [0x11e]})
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x14c, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000100)={0x5, 0x7fc00, 0x2a2b, 0x0, 0xe3d19353a8ba090f})

05:52:51 executing program 1:
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x3f, 0xba33, 0x1, 0x2, 0x3, 0x6, 0x2, 0x5, 0x1c0d, 0xff, 0x100000000, 0x1000, 0x28cd, 0x3, 0x14, 0x8}})
r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r4=>0x0}, &(0x7f0000000080)=0xc)
r5 = socket$packet(0x11, 0x400400000000a, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x8, &(0x7f0000000380)=[{0x401, 0x615, 0x3}, {0xc0, 0x2, 0x9, 0x3}, {0x7, 0x5e, 0x7f}, {0x7}, {0x8, 0x9, 0x4, 0x5}, {0x7, 0x989, 0x4, 0x4}, {0x0, 0x6, 0x4, 0x5}, {0x2, 0x171, 0x7}]}, 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000081000000080045000030000000000000907800000000ac1414bb0400907800000000450000000000000000000000ac141400e0000001eafd34627d3a4d9659f13ffe3acddf964f81d73b652c53fc4d55ebc5d7e88c2789a02ff93c775887d2b93dd0c0aeb8f64996b0c5a01b78d1542738364d86d1c8ed06b93c85a1fc4cd75d960f0b7c71f669"], 0x0)
r6 = geteuid()
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000000c0)={0x7, 0x22b8, r4, 0xfff, r6, 0x8, 0x5, 0x10001})
dup3(r1, r2, 0x80000)

05:52:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29d500002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:51 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x9, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f0000000080)=""/9}, &(0x7f0000000100)=0x78)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x400000000000000]}]}})

05:52:51 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290103002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1599.901754] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1599.923047] binder: 2199:2200 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x74000000]}]}})

05:52:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1}, 0x11)

[ 1600.000009] binder_alloc: binder_alloc_mmap_handler: 2199 20001000-20004000 already mapped failed -16
05:52:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900ce002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1600.076135] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.082762] binder: 2199:2200 ioctl 40046207 0 returned -16
[ 1600.092226] binder_alloc: 2199: binder_alloc_buf, no vma
[ 1600.098724] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1600.111346] binder: 2199:2209 transaction failed 29189/-3, size 0-0 line 2973
05:52:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x60000000]}]}})

[ 1600.136965] binder: 2199:2222 BC_FREE_BUFFER u0000000020001000 no match
[ 1600.157448] binder: release 2199:2200 transaction 958 out, still active
[ 1600.170026] binder: undelivered TRANSACTION_COMPLETE
05:52:51 executing program 2:
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))
mq_unlink(&(0x7f0000000040)='\x00')
socket$bt_rfcomm(0x1f, 0x1, 0x3)
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x802, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={<r1=>0x0, 0xff}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x3ff}, &(0x7f0000000180)=0x8)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x18)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000200)={0x5, 0x80, 0x1})
r2 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000240)=""/159)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000300)={0x1f, 0x101, 0x1})
ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x185)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340)=0x3ff, 0x4)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000380)={0x8001, 0x1})
r3 = syz_open_dev$media(&(0x7f00000003c0)='/dev/media#\x00', 0x1, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000400)={0x6, 0x1000, 0x1d6, 0x34b1, 0x6}, 0x14)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000440)={0xfffffffffffffff8, 0x8, 0x9})
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480))
lsetxattr$trusted_overlay_nlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='trusted.overlay.nlink\x00', &(0x7f0000000600)={'U-', 0x80000001}, 0x28, 0x3)
setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4)
ioctl$TIOCCONS(r3, 0x541d)
ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000640)={0x8000, <r4=>0x0, 0x10003, 0x400})
ioctl$DRM_IOCTL_AGP_BIND(r3, 0x40106436, &(0x7f0000000680)={r4, 0xffffffff})
write$FUSE_BMAP(r3, &(0x7f00000006c0)={0x18, 0xfffffffffffffffe, 0x2, {0xe28}}, 0x18)
clock_gettime(0x0, &(0x7f0000000780)={<r5=>0x0, <r6=>0x0})
rt_sigtimedwait(&(0x7f0000000700), &(0x7f0000000740), &(0x7f00000007c0)={r5, r6+30000000}, 0x8)
write$cgroup_type(r0, &(0x7f0000000800)='threaded\x00', 0x9)

05:52:51 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000380), 0x4)
r4 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000400)={0x7940, 0x5, 0x4, {0x7, @sliced={0x9, [0x2, 0x4, 0x101, 0x4, 0x5, 0x0, 0x8001, 0x7ff, 0x1, 0x5, 0xfff, 0x6, 0x1, 0x1, 0x3, 0xc80, 0x2, 0x3f, 0x200, 0x3, 0xfffffffffffffff9, 0x5, 0xfffffffffffffffe, 0xfded, 0xfffffffffffffffc, 0x7fffffff, 0x401, 0x6, 0x5, 0x7, 0x800, 0x5, 0x8, 0x5, 0x3, 0x2, 0x2, 0xa2ba, 0x5db3, 0x3, 0xd0bf804, 0x5, 0x4, 0x8000, 0x6, 0x9, 0x4, 0x5], 0x9}}})
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000580)=0xffffffff)
ioctl$KVM_CREATE_VCPU(r3, 0xae03, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, 0x0)
ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000200)={0x7, "0f06373495f022b51fa058d7fa6c7b462168efa1655171960d591cd2a6f1d049", 0x4, 0x0, 0xffff, 0x0, 0x4, 0x0, 0xfffffffffffeffff, 0x2})
ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000180)={0x80})
ioctl$KVM_GET_NR_MMU_PAGES(r3, 0xae45, 0xa)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, 0x0)
ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000500)=""/74)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000100)='#\'\x00', &(0x7f00000001c0)='em0selinux\x00'], &(0x7f0000000340)=[&(0x7f00000002c0)=':md5sum\',security!\x00', &(0x7f0000000300)='tls\x00'])

[ 1600.192033] binder: send failed reply for transaction 958, target dead
05:52:51 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902ac002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0x2)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

[ 1600.264868] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1600.266601] binder: undelivered TRANSACTION_ERROR: 29189
[ 1600.346073] binder: 2236:2237 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1600.363106] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1600.378087] binder_alloc: binder_alloc_mmap_handler: 2236 20001000-20004000 already mapped failed -16
[ 1600.389202] binder: BINDER_SET_CONTEXT_MGR already set
[ 1600.418065] binder_alloc: 2236: binder_alloc_buf, no vma
[ 1600.435132] binder: 2236:2237 ioctl 40046207 0 returned -16
[ 1600.450886] binder: 2236:2241 transaction failed 29189/-3, size 0-0 line 2973
[ 1600.461476] binder: 2236:2246 BC_FREE_BUFFER u0000000020001000 no match
[ 1600.472964] binder: release 2236:2237 transaction 961 out, still active
[ 1600.482317] binder: undelivered TRANSACTION_COMPLETE
[ 1600.482432] binder: send failed reply for transaction 961, target dead
[ 1600.516544] binder: undelivered TRANSACTION_ERROR: 29189
05:52:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x300)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x7fffffff, 0x1, 0x9, 0x5}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="b5785fd26220d01135126435800445cb5973713eb428039a4d710a0d6b43fdefe39a3df15435c938ab0db9fd369a9ff25f16f72ebe0b36082ca88ea59a9b5d69d44f58c1e38f794d0340fca8b8daa7eb5889c4daaac611934ae951010278e42240797c303c249a71e05dd5e7b819d8a8e5bf24cfb4bfcaf1958f528d3dcd76de3b916ccf936bf7c2af202358e5e458d3ad20a4"], 0x29)
r4 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3ff, 0x2001)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipddp0\x00', r2})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x84, 0x4})
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{0x7, 0x3, 0x20, 0x7, '\x00', 0x9}, 0x4, 0x0, 0x5, r4, 0x9, 0x9, 'syz1\x00', &(0x7f0000000600)=["74727573746564288b0047d4d04b5742a8bd5f4574e8dee55df051b4a7faf004", '/proc/self/attr/exec\x00', '/proc/self/attr/exec\x00', 'wlan1posix_acl_accessselfppp0mime_typeppp0nodev^wlan1\x00', '\x00', '\x00', 'ipddp0\x00', '[trusted$\x00', 'cpuset\\system\x00'], 0xa1, [], [0x0, 0x2, 0x4, 0x1]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)

05:52:52 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/42, &(0x7f0000000240)=0x2a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x1)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0)
ioctl$TIOCSBRK(r1, 0x40044591)
r2 = socket$inet6(0xa, 0x400000000, 0x7ffffffa)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)=<r3=>0x0)
r4 = perf_event_open(&(0x7f0000000480)={0x6, 0x70, 0xffffffffffff3d0a, 0xffffffffffffffff, 0xffffffffffffa5fb, 0x7fff, 0x0, 0x8001, 0x1, 0x0, 0xffffffff, 0x2, 0x81, 0x1, 0x5aaf, 0x8, 0x3f, 0x1, 0x40, 0xc25d, 0x7, 0x6, 0x7fff, 0x81, 0x1, 0xffffffffffffff92, 0x4, 0xffffffff, 0x8, 0x10001, 0x0, 0x8, 0xfffffffffffffff9, 0x7fffffff, 0x4, 0x7, 0x0, 0x100000000, 0x0, 0x1ff, 0x1, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x4, 0x9, 0x7, 0x2, 0x4, 0x4}, r3, 0x8, 0xffffffffffffffff, 0x1)
sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x4010000000009)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffff9c, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x2)
fcntl$setflags(r5, 0x2, 0x1)
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
fsetxattr$security_selinux(r4, &(0x7f0000000280)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:kvm_device_t:s0\x00', 0x22, 0x3)
r8 = dup(r7)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000100))
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r7, &(0x7f00000004c0), 0x0, 0x20000008, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000340)=0x101, 0xffffffffffffff07)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10)
ioctl$NBD_CLEAR_QUE(r8, 0xab05)
r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0xb2)
ftruncate(r9, 0x2007fff)
sendfile(r8, r9, &(0x7f0000d83ff8), 0x8000fffffffe)

05:52:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x1000000]}]}})

05:52:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29020d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:52 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x583, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

[ 1600.850529] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1600.860848] binder: 2254:2260 ioctl c0306201 20000000 returned -14
[ 1600.868416] Unknown ioctl 1074021777
05:52:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293400002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1600.895867] binder: 2254:2260 ioctl 40046205 8 returned -22
[ 1600.923989] binder: 2254:2260 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x700]}]}})

[ 1600.950737] binder_alloc: binder_alloc_mmap_handler: 2254 20001000-20004000 already mapped failed -16
05:52:52 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299e01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1601.000844] binder: BINDER_SET_CONTEXT_MGR already set
[ 1601.018580] binder: 2254:2260 ioctl 40046207 0 returned -16
[ 1601.045009] binder_alloc: 2254: binder_alloc_buf, no vma
[ 1601.063468] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1601.073350] binder: 2254:2270 transaction failed 29189/-3, size 0-0 line 2973
[ 1601.106568] binder: 2254:2266 ioctl 40046205 8 returned -22
[ 1601.146769] binder: release 2254:2260 transaction 964 out, still active
[ 1601.153587] binder: undelivered TRANSACTION_COMPLETE
[ 1601.160749] binder: 2254:2270 ioctl c0306201 20000000 returned -14
[ 1601.195198] binder: send failed reply for transaction 964, target dead
05:52:53 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x90040, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000001c0)={0x7ffffffe, 0x81, 0xa, 0xfffffffffffffff5, 0xb, 0x1})
r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)=0x7ff)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fdatasync(r2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x7f, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000cacd0f741c023349ac506cf06f4d0fb90000140000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00000000001800120010000100767469000c00020008000400e0000002"], 0x40}}, 0x0)

05:52:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x300)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x7fffffff, 0x1, 0x9, 0x5}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="b5785fd26220d01135126435800445cb5973713eb428039a4d710a0d6b43fdefe39a3df15435c938ab0db9fd369a9ff25f16f72ebe0b36082ca88ea59a9b5d69d44f58c1e38f794d0340fca8b8daa7eb5889c4daaac611934ae951010278e42240797c303c249a71e05dd5e7b819d8a8e5bf24cfb4bfcaf1958f528d3dcd76de3b916ccf936bf7c2af202358e5e458d3ad20a4"], 0x29)
r4 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3ff, 0x2001)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipddp0\x00', r2})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x84, 0x4})
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{0x7, 0x3, 0x20, 0x7, '\x00', 0x9}, 0x4, 0x0, 0x5, r4, 0x9, 0x9, 'syz1\x00', &(0x7f0000000600)=["74727573746564288b0047d4d04b5742a8bd5f4574e8dee55df051b4a7faf004", '/proc/self/attr/exec\x00', '/proc/self/attr/exec\x00', 'wlan1posix_acl_accessselfppp0mime_typeppp0nodev^wlan1\x00', '\x00', '\x00', 'ipddp0\x00', '[trusted$\x00', 'cpuset\\system\x00'], 0xa1, [], [0x0, 0x2, 0x4, 0x1]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)

05:52:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000400000)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="45afafdc3ffa893e890000000000fff279800300000000000000802dab8b43f50a489fd9e9d0b5ea597b23924614ce5952d76a5dafdfd7b6b01e4ed60dd3f240e2b287f09bf3d81b8fadd1a6963bdf4f98722179b77de615c9fa502ea03f704adf656cf2464b749ac23316573d3072b532280ab3c52ef782776112cab6ef20dfecc80bece86299b8d7575b81e44d3afbca42d8c49ea685250331b67000ed0916e668206373c3ee284955f70966d948fd0088ddbdd487d65b6691910fabd35c0e21fdecc9d5132fa8c86f8a3c87d7e0", @ANYRES64=r2], 0x0, 0x0, 0x0})

05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ac00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x300]}]}})

05:52:53 executing program 4:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20000000000000, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000040)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1601.255516] binder: undelivered TRANSACTION_ERROR: 29189
[ 1601.324425] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1601.335419] binder: 2288:2289 unknown command -592466107
05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290244002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1601.367099] binder: 2292:2293 unknown command 2047
[ 1601.372162] binder: 2288:2289 ioctl c0306201 200002c0 returned -22
[ 1601.400841] binder: 2296:2298 unknown command 2047
[ 1601.407821] binder_alloc: binder_alloc_mmap_handler: 2288 20001000-20004000 already mapped failed -16
05:52:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x300)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x7fffffff, 0x1, 0x9, 0x5}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="b5785fd26220d01135126435800445cb5973713eb428039a4d710a0d6b43fdefe39a3df15435c938ab0db9fd369a9ff25f16f72ebe0b36082ca88ea59a9b5d69d44f58c1e38f794d0340fca8b8daa7eb5889c4daaac611934ae951010278e42240797c303c249a71e05dd5e7b819d8a8e5bf24cfb4bfcaf1958f528d3dcd76de3b916ccf936bf7c2af202358e5e458d3ad20a4"], 0x29)
r4 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3ff, 0x2001)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipddp0\x00', r2})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x84, 0x4})
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{0x7, 0x3, 0x20, 0x7, '\x00', 0x9}, 0x4, 0x0, 0x5, r4, 0x9, 0x9, 'syz1\x00', &(0x7f0000000600)=["74727573746564288b0047d4d04b5742a8bd5f4574e8dee55df051b4a7faf004", '/proc/self/attr/exec\x00', '/proc/self/attr/exec\x00', 'wlan1posix_acl_accessselfppp0mime_typeppp0nodev^wlan1\x00', '\x00', '\x00', 'ipddp0\x00', '[trusted$\x00', 'cpuset\\system\x00'], 0xa1, [], [0x0, 0x2, 0x4, 0x1]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6800]}]}})

05:52:53 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x0)
tee(r0, r1, 0x9, 0xd)
r2 = syz_open_pts(r0, 0x20040)
r3 = dup3(r2, r0, 0x0)
read(r0, &(0x7f00000000c0)=""/19, 0x1b43d2d9)
ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000000))

[ 1601.426699] binder: 2292:2293 ioctl c0306201 200000c0 returned -22
[ 1601.458324] binder: 2296:2298 ioctl c0306201 200000c0 returned -22
[ 1601.507226] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1601.518605] binder: 2288:2300 unknown command -592466107
05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293702002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7400000000000000]}]}})

[ 1601.548270] binder: 2288:2300 ioctl c0306201 200002c0 returned -22
05:52:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x300)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x7fffffff, 0x1, 0x9, 0x5}, 0x10)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="b5785fd26220d01135126435800445cb5973713eb428039a4d710a0d6b43fdefe39a3df15435c938ab0db9fd369a9ff25f16f72ebe0b36082ca88ea59a9b5d69d44f58c1e38f794d0340fca8b8daa7eb5889c4daaac611934ae951010278e42240797c303c249a71e05dd5e7b819d8a8e5bf24cfb4bfcaf1958f528d3dcd76de3b916ccf936bf7c2af202358e5e458d3ad20a4"], 0x29)
r4 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3ff, 0x2001)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'ipddp0\x00', r2})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000001c0)={0x84, 0x4})
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000300)={{0x7, 0x3, 0x20, 0x7, '\x00', 0x9}, 0x4, 0x0, 0x5, r4, 0x9, 0x9, 'syz1\x00', &(0x7f0000000600)=["74727573746564288b0047d4d04b5742a8bd5f4574e8dee55df051b4a7faf004", '/proc/self/attr/exec\x00', '/proc/self/attr/exec\x00', 'wlan1posix_acl_accessselfppp0mime_typeppp0nodev^wlan1\x00', '\x00', '\x00', 'ipddp0\x00', '[trusted$\x00', 'cpuset\\system\x00'], 0xa1, [], [0x0, 0x2, 0x4, 0x1]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0)

05:52:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8001, 0x0, r3, 0x7, r2, 0x6, 0x1, 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x80800)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x3f, &(0x7f00000000c0)=""/111, &(0x7f0000000140)=0x6f)
r2 = getpgid(0xffffffffffffffff)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={<r3=>0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000400)=0xc)
getresgid(&(0x7f0000000440)=<r6=>0x0, &(0x7f0000000480), &(0x7f00000004c0)=<r7=>0x0)
sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f0000000200), 0xc, &(0x7f0000000240)=[{&(0x7f0000000300)={0xb0, 0x39, 0x800, 0x70bd29, 0x25dfdbfb, "", [@generic="df66890ebf9e19593c000c9555d4505d87631844657faea0259d6d1b32ea72418f2f3efdabddcf56ef12f120485b05e1667f9f208cbd92e5211e0e2a447b768b00", @generic="540c18c435f2b1c0b9329f", @generic="1671cf2bae5307a3bd5c6265e00c8822f8bf670ff87f19fda1da426a", @generic="fabf43e580ef5a12a4c5de0dd02c0b79ed49f4f2611d973f34c2e54d691e91048f6a6c0f2f5a3b5e9fd33cd77c99969b43866a7b40"]}, 0xb0}], 0x1, &(0x7f0000000500)=[@rights={0x28, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r2, r4, r7}], 0x48, 0x810}, 0x4040)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f0000000700)=ANY=[@ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRES16=r3, @ANYPTR, @ANYRESDEC=r6, @ANYRES16=r2, @ANYRES64=r6, @ANYBLOB="fa21574fd721e221dd9d3ff9b594891218089b6fe43e8cf07a17644f4db034b0ee644f87b167032d5b3878b0326706ac85d57d327459180e41d6a7e3757baa7c7681c43652fa197975ea338d2151647f2b8cf3e313ea6ca22d6afb5e441858bdf7d4aaf8bd264ad6387a6b05aef5afe4f99af1ddda34c789b5215ecb3b968c6b32ecf2882f539536c58b6e1a88f7bcf71f", @ANYPTR, @ANYRES32=0x0], @ANYPTR, @ANYRESDEC, @ANYBLOB="f8775d99dca2211a8c9b9c9b4eecda9bcca85f75679026ff30d83343b6f2f624a05cf4c9db4ebc0dc71ffff1a4b22509efd23580e8a5ea932d23dbeb3279a3b582deafb8f350368909150cc3121421f9e8c5806199696512c8e0940a137fd87a14d841592737553993048740766b8304fcec0003bece77426fde6f836017c3bece8e8f949c02dd4ae0fc93db9a41ff70eee28e452aa3c8d9d2580a8c8053f0c4681265e105556d19801d3955c1e0", @ANYRES64=r5, @ANYRES16=r1]], 0xfe1d, 0x0, 0x0})
r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x220040, 0x0)
ioctl$SCSI_IOCTL_SYNC(r8, 0x4)
r9 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.nlink\x00', &(0x7f0000000840)={'U-', 0x8e}, 0x28, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0363d73b690000e27c552dd043de77d129008060790840", @ANYRES64=r9], 0x0, 0x0, 0x0})

05:52:53 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
ioctl(r0, 0x20000200008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x2e, 0x7c}}, &(0x7f0000000180)="4550d4001f91eb2f57b73224433025039c3096b20c6b439348bf689c08608537d6223e63adc0624fbae2e109359dce6922324ccc13160b68cae6430697259dd52d1f73e16adc3592d02925dffae85e9cd2398c6c67c87fb5b12602f145b484be45912966e8b7e2f66069c56dd76c1dc112013c3a6b4de999cdcdc8855aee3437dcc87580cfbe546fbbfbc0eb56d8bbbea2904a7c73c2"}, 0x48)

[ 1601.647743] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a001002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7a000000]}]}})

[ 1601.749686] binder: 2332:2334 ioctl c0306201 20000880 returned -14
[ 1601.780909] binder_alloc: binder_alloc_mmap_handler: 2332 20001000-20005000 already mapped failed -16
05:52:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
fallocate(r2, 0x40, 0x2, 0x0)
mlockall(0x5)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000040)={{0x6, @broadcast, 0x4e21, 0x1, 'nq\x00', 0x4, 0x8001, 0x44}, {@multicast2, 0x4e24, 0x2000, 0x6, 0x9, 0x8}}, 0x44)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1601.854806] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1601.869758] binder: 2332:2334 ioctl c0306201 20000880 returned -14
05:52:53 executing program 2:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup(r1)
ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @loopback}, {0x1, @dev={[], 0xd}}, 0x20, {0x2, 0x4e24, @multicast2}, 'veth0_to_bridge\x00'})
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000)
mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00')
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/vcs\x00', 0x10800, 0x0)
preadv(r4, &(0x7f0000000640)=[{&(0x7f0000000740)=""/116, 0x74}, {&(0x7f00000000c0)=""/146, 0x92}, {&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/224, 0xe0}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f00000005c0)=""/125, 0x7d}], 0x7, 0x0)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x200000000000000]}]}})

[ 1601.909589] binder_alloc: binder_alloc_mmap_handler: 2332 20001000-20005000 already mapped failed -16
05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2901b0002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1601.979141] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:53 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x8000)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0xfffffffffffffffe, 0x10, [0xfff, 0x3ff, 0x80000001, 0x4]})
openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:53 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x10000, 0x0)
ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000240)="457a1b4d04115d56a815")
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000280), &(0x7f0000000300)=0x10)
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
r4 = dup(r0)
mq_getsetattr(r4, &(0x7f0000000000)={0x4, 0xb, 0x7, 0x5160, 0x0, 0x1, 0x8, 0x3}, &(0x7f0000000040))

05:52:53 executing program 1:
clone(0x84007ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
r0 = getpid()
mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000180))
ptrace(0x10, r0)
waitid(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/qat_adf_ctl\x00', 0x84000, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
memfd_create(0x0, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'veth0_to_bond\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
clock_gettime(0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x0)

05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0xfecaedfe]}]}})

05:52:53 executing program 2:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0xfffffffffffffe4f, 0x0, 0x0, 0x715d89406d44f7c2)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000f, 0x1a0150, r1, 0x5)

[ 1602.129841] binder: 2365:2366 got transaction to invalid handle
[ 1602.167935] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:53 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29017f002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1602.192954] binder: 2365:2366 transaction failed 29201/-22, size 4686726052450498316-1442712180626905852 line 2834
[ 1602.195219] binder: 2365:2377 BC_FREE_BUFFER u0000000020001000 no match
05:52:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6000000]}]}})

05:52:54 executing program 2:
r0 = socket$inet6(0xa, 0xffffffffffffffff, 0x801000000000008a)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r0, 0xfffffffffffffe14)
accept4(r0, &(0x7f0000000340)=@alg, &(0x7f0000000040)=0x80, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000140), &(0x7f00000001c0)}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000))
tkill(r1, 0x1000000000013)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000000080)='G', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setpriority(0x1, r1, 0x80)

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290146002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1602.287255] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.300185] binder: 2365:2366 ioctl 40046207 0 returned -16
[ 1602.300193] binder: 2365:2387 got transaction to invalid handle
[ 1602.313566] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1602.319735] binder: 2365:2387 transaction failed 29201/-22, size 4686726052450498316-1442712180626905852 line 2834
[ 1602.320328] binder: 2365:2366 BC_FREE_BUFFER u0000000020001000 no match
05:52:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x38a)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
write$binfmt_aout(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x26a)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/168)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3)
sendfile(r0, r1, 0x0, 0x20000102000007)

[ 1602.338698] binder: undelivered TRANSACTION_ERROR: 29201
05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7000000]}]}})

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290084002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:54 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='/exe\x00\x00\x00\x00\x00\x00')
fcntl$setstatus(r2, 0x4, 0x463fd)
io_setup(0x1, &(0x7f0000000040)=<r3=>0x0)
sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000340)=@nl=@kern={0x10, 0x0, 0x0, 0x2c800000}, 0x80, &(0x7f0000000400)=[{&(0x7f00000003c0)="c3cdf92d8df88a00d12c765ba0c2f38811f5cc", 0x13}], 0x1, 0x0, 0x0, 0x24000000}, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x2, 0x4)
io_submit(r3, 0x2, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, r2, &(0x7f0000000200), 0xfffffdcc}])
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f00000002c0)=""/98)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000140)={0x7, 0x80, 0x3f, 0xfffffffffffffff7, 0x6, 0xffffffffffff7231, 0x4, 0x0, 0xffffffffb2422c19, 0x3f, 0x18, 0x3})
creat(&(0x7f0000000000)='./bus\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180), 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, [0x0, 0x1, 0xfffffffffffffff8, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x8f32]}, &(0x7f0000000080)=0x100)

[ 1602.451559] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1602.484663] binder: undelivered TRANSACTION_ERROR: 29201
05:52:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040)=0x3, 0x4)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})

05:52:54 executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8f7150d0500000000000000e900002069a27fff"], 0x0}, 0x48)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6)
r0 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000004c0)=0x2, 0x4)
bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5)
uselib(&(0x7f0000000080)='./file0\x00')
r1 = socket$inet(0x2b, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10)

05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6c000000]}]}})

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290000000f00190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1602.588070] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1602.621626] binder: 2415:2418 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7a00000000000000]}]}})

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29fc01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1602.671124] binder: BINDER_SET_CONTEXT_MGR already set
[ 1602.678085] tpacket_rcv: packet too big, clamped from 68 to 4294967280. macoff=96
[ 1602.730800] binder: 2415:2418 ioctl 40046207 0 returned -16
[ 1602.739459] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1602.746257] binder_alloc: 2415: binder_alloc_buf, no vma
[ 1602.759738] binder: 2415:2431 BC_FREE_BUFFER u0000000020001000 no match
05:52:54 executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={"6e72300100", 0x802})
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, 0x0)

05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6c]}]}})

[ 1602.785799] binder: send failed reply for transaction 970 to 2415:2418
[ 1602.793084] binder: 2415:2421 transaction failed 29189/-3, size 0-0 line 2973
[ 1602.829861] binder: undelivered TRANSACTION_ERROR: 29189
[ 1602.884988] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1602.930463] binder: undelivered TRANSACTION_COMPLETE
[ 1602.939788] binder: undelivered TRANSACTION_ERROR: 29189
05:52:54 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x20000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x106, 0x1007}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r3, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070")
bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia)\x00'}, 0x58)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040))

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="297902002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x74]}]}})

05:52:54 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634040"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x101000)
r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000c0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r4, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xd2d2c39cb9314e95}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3f}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8080)

05:52:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7, 0x10000)
gettid()
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10001, 0x9, 0xfffffffffffeffff, 0x1000, 0x3f, 0x400}, 0x1c)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:54 executing program 1:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfffffe, 0x8201)
mq_timedreceive(r0, &(0x7f0000000080)=""/184, 0xb8, 0x9, &(0x7f0000000000)={0x0, 0x989680})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x7f, 0x7}, {0x0, 0x1}, 0x0, 0x2, 0x5})

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900c8002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1603.065735] binder: 2455:2456 unknown command 1077961489
[ 1603.071257] binder: 2455:2456 ioctl c0306201 20007000 returned -22
[ 1603.085291] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:54 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x5]}]}})

05:52:54 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x38a)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
write$binfmt_aout(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x26a)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/168)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3)
sendfile(r0, r1, 0x0, 0x20000102000007)

[ 1603.155436] binder: 2455:2456 BC_FREE_BUFFER u0000000020001000 no match
[ 1603.182903] binder_alloc_mmap_handler: 1 callbacks suppressed
[ 1603.182921] binder_alloc: binder_alloc_mmap_handler: 2455 20001000-20004000 already mapped failed -16
05:52:54 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
listen(r0, 0x3)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x2, 0x4260, 0x401})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x1e, &(0x7f0000000000)=[@in={0x2, 0x0, @broadcast}], 0xffad)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x102e2)

05:52:54 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902c1002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1603.284841] binder: BINDER_SET_CONTEXT_MGR already set
[ 1603.298776] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1603.318048] binder: 2455:2456 ioctl 40046207 0 returned -16
05:52:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902d4002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x1000, 0x8000)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x8012, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = memfd_create(&(0x7f0000000080)='/dev/binder#\x00', 0x0)
write$binfmt_misc(r2, &(0x7f0000000140)={'syz0', "00b13efca78d0de399480aaf9af4e615deccb88994ea89362658a6d12531ae56d7603aed6f856ff2e7e6e9797f42d003f560254f46eb8e3393b9e3c3f90bdcbdfb29"}, 0x46)
ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0x9, 0x1, 0xffffffff, 0x3, 0x0, 0x20000000000, 0x1, 0xaa, 0x1, 0x9, 0x9, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11be63492ac4bbb43f463507e7862e94c5355b0621b1af0bc2"], 0x0, 0x0, 0x0})
r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000100))
getpid()
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

05:52:55 executing program 1:
r0 = perf_event_open$cgroup(0x0, 0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0)
clone(0x0, &(0x7f000075cf53), 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f00005ebff8)=0x3f)
fcntl$setsig(r1, 0xa, 0x9)
r3 = memfd_create(&(0x7f0000000000)='eth1-wlan0\x00', 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x3, 0x34e, 0x2})
fcntl$setownex(r1, 0xf, &(0x7f0000704000)={0x2})
recvmsg(r2, &(0x7f000095cfc8)={0x0, 0x0, 0x0}, 0x0)
ioctl$int_in(r3, 0x5473, &(0x7f00000001c0)=0x10000)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000080)={<r4=>0x0, 0x8}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={r4, 0x6}, &(0x7f0000000180)=0x8)
dup2(r1, r2)
tkill(0x0, 0x15)
fcntl$dupfd(r0, 0x0, r0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=<r5=>0x0)
wait4(r5, 0x0, 0x60000002, 0x0)

05:52:55 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0x38a)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
write$binfmt_aout(r1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b01047f080100009b03000000080000bd030000070000000000000000000000255a87c84573eac9b48dc6493fbf6243801411b0ab1535af5f05c434481ee38cefae03dd881104b4c398c316056f3a4542bcbb29c212419866d2dd817001fa14eec79ec2d8d24899bcd90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca7a824ce8979b42f63879000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000b0000000000000200000000000000000000000000000000000000000000000000000000000f1ff0000000000000000000000000000000000000000f1f26ed5000000000000000000fd0000000000000000003dc9ceadeed31c72ae1a2645d9076e0700000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d59473f60dd4c06d7f29a6fb2d7ff1219acad8b95669baf4a7c506840ea257bfd2040148b08be13ea39efb98c08c8b7fca396fdad18d49b7490c1f42b09d01505fe3827f3b6fd3e77961702cd9906b7060de0a73695f6ba70ed05e0034b70b4862a27b7fc0cc721490e7dcb4cd2c419b581e23c4576efd4d8077e9d7bfc088efef957ac6ef89e2de6255bfe40510ec85dbbed83a3f659ca0289a19fd3c885ee7e1eec7d9b23edc5ceebcbc0534f8844cc40765e4a3beb7363da06ca5684f0d3f2b05eab8a4eb6f141d7601669bc3492962d862cffd4f570f19e06b9797cc90f1d7474028ff9f7a6befaf814cbeebc01de97145862c1c623f0f93a0cd00000100b51719580520f9a4a56e59308f753aec314c2119eea23f89601aaa6dbd4c909fc651e0dac09e27c4cf142c15d58de7d3074c58460051c05e1283aef5d18cf51a0f93ae5ada62a31f2031eff5d3cc5698195088e1a73fb192806b7e5bf2c0c10c0379edff8ad3e555d2531e3c35aa0464fbff562086d784ecc77df6caaba62290907077874a4047e1780274607ee50ed2c834f70e52353a819ad6c6f81801d73782184bf520fabc92c28681ed80f0ad9fd8023d6ee9c157f36af3b8b660b434693ad7ebbda75040000000000000008fb714ea7950218f3a7bf3e7320b0bf0c8e823e0a7bd171b2a5f5d5d9246e28efa8a35b348b4819714e2c3be7677a986ae9b79c672184cd08830662c81fb3e48c72d1d74c4edf063f209"], 0x26a)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socket$vsock_dgram(0x28, 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000180)=""/168)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r4)
ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000040)=r3)
sendfile(r0, r1, 0x0, 0x20000102000007)

05:52:55 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0xfecaedfe00000000]}]}})

[ 1603.334514] binder: 2455:2478 unknown command 1077961489
[ 1603.340526] binder: 2455:2499 BC_FREE_BUFFER u0000000020001000 no match
[ 1603.355723] binder: 2455:2478 ioctl c0306201 20007000 returned -22
05:52:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000180)={<r4=>0x0, @in={{0x2, 0x4e24, @loopback}}, 0xfffffffffffffffe, 0x2, 0x1000, 0x1, 0xfffffffffffffff9}, &(0x7f0000000040)=0x98)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x100000001, 0x200, 0x8000, 0x5, 0x5, 0x4, 0xff, r4}, &(0x7f0000000100)=0x20)

[ 1603.487373] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:55 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x600000000000000]}]}})

05:52:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1603.578243] binder: 2517:2518 unknown command 1231273489
[ 1603.604075] binder: 2517:2518 ioctl c0306201 20007000 returned -22
05:52:55 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="000300000000000010ff010000000000000001000100000001000000000000000000000000000000"], 0x28)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x50002, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x8, 0x4, "271c1b1e208a30028d01d00374005777bc39d0bdfbdf04cf69c2b6f138635eb15aa13c2d403e32fbab6b56e841c6be6057a6aae4b542e3aa21158826f4c587d6", "55b9e0e04ab8110d9aa5888266586cacf455464e6bdb47443d27a833c8257ed3bc736c7bbcacf23421e1082f978aca78530d87e03522868c813aa85d42fb3cf8", "4ecab367693456872d1c4fd839524f867acd738330b6f843f4dd7b991a2f3c8f", [0x2, 0x3]})
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r3, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000040))

[ 1603.654917] binder: 2517:2527 unknown command 1231273489
[ 1603.669738] binder: 2517:2527 ioctl c0306201 20007000 returned -22
[ 1603.690603] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:55 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x51, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:55 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299d01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:55 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000300)="5b578108f9d8a5b6b606006b7472752400fca83dfdef04e6a7d194c1da5fd6dc22dec2087882167bb798ff3f9ed9d9cda46cca2c241c0cdf6192086d3d95e5a3d66bc202705cca69cf3995f890e3ee4a9a5ea08ec91388daeee8c76741b96ba9ef6f00bd55c0d25dcc460698cb1d56298f0000080000000000000000000000000000000000", 0x5)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000180)={0x1, "e192029aa3f2558d5396605ac7e80ba3a814dd121bdbbd3feed95080eb4644f5", 0x10, 0x9b72, 0xb75, 0x18, 0x7})
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000040)={0x1, [0x0]})
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$P9_RLERROR(r0, &(0x7f0000000080)={0x15, 0x7, 0x1, {0xc, '/dev/autofs\x00'}}, 0x15)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:55 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0xffffff7f00000000]}]}})

[ 1603.726550] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1603.852997] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1603.876354] binder: 2539:2546 BC_FREE_BUFFER u0000000020001000 no match
05:52:55 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x7d, 0x0, [0x1d9, 0x2], [0xc2]})

[ 1603.908079] binder_alloc: binder_alloc_mmap_handler: 2539 20fff000-21000000 already mapped failed -16
[ 1603.963464] binder: BINDER_SET_CONTEXT_MGR already set
[ 1603.973808] binder: 2539:2546 ioctl 40046207 0 returned -16
[ 1603.988745] binder_alloc: 2539: binder_alloc_buf, no vma
[ 1604.010096] binder: 2539:2555 transaction failed 29189/-3, size 0-0 line 2973
[ 1604.024959] binder: 2539:2552 BC_FREE_BUFFER u0000000020001000 no match
[ 1604.032687] kvm [2556]: vcpu0, guest rIP: 0xfff0 kvm_set_msr_common: MSR_IA32_DEBUGCTLMSR 0x2, nop
[ 1604.039460] binder: release 2539:2546 transaction 974 out, still active
[ 1604.054893] binder: undelivered TRANSACTION_COMPLETE
[ 1604.065079] binder: send failed reply for transaction 974, target dead
[ 1604.095016] binder: undelivered TRANSACTION_ERROR: 29189
05:52:56 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x50, &(0x7f0000000080)}, 0x10)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x7b, 0x0, [0x250, 0x4b564d02]})

05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ce02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x2, 0x8, 0x4}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x9dd2}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4000000]}]}})

05:52:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffe)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:56 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000db4000), 0xc, &(0x7f00006bcff0)={&(0x7f0000000000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x6}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x4}}]}, 0x2c}}, 0x0)

[ 1604.313769] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1604.345196] netlink: 'syz-executor2': attribute type 21 has an invalid length.
05:52:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7a]}]}})

05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29023d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1604.366227] binder: 2576:2578 transaction failed 29189/-22, size 0-0 line 2834
[ 1604.375435] netlink: 'syz-executor2': attribute type 4 has an invalid length.
[ 1604.391537] binder: 2576:2579 transaction failed 29189/-22, size 0-0 line 2834
[ 1604.400518] binder: undelivered TRANSACTION_ERROR: 29189
[ 1604.417092] netlink: 'syz-executor2': attribute type 21 has an invalid length.
[ 1604.442233] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1604.450633] netlink: 'syz-executor2': attribute type 4 has an invalid length.
05:52:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
r3 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000000)={0x1, 0x6, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty, @local, @broadcast, @random="eac878520105", @random="3ba107995599"]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902c7002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1604.503019] binder: undelivered TRANSACTION_ERROR: 29189
05:52:56 executing program 2:
socketpair$unix(0x1, 0x20000000000005, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a00)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000b00)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@empty, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}}, &(0x7f0000000e00)=0xe8)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000e40)={@remote, <r9=>0x0}, &(0x7f0000000e80)=0x14)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1c, &(0x7f0000000ec0)={@ipv4={[], [], @local}, <r10=>0x0}, &(0x7f0000000f00)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000f40)={'team0\x00', <r11=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f80)={<r12=>0x0, @loopback}, &(0x7f0000000fc0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000001200)=0xe8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001240)={'team0\x00', <r14=>0x0})
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002d00)={<r15=>0x0, @local, @multicast2}, &(0x7f0000002d40)=0xc)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002d80)={<r16=>0x0, @multicast1, @multicast2}, &(0x7f0000002dc0)=0xc)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002e00)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000002f00)=0xe8)
getsockname$packet(0xffffffffffffffff, &(0x7f0000003000)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003040)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000003080)={@rand_addr, @loopback, <r19=>0x0}, &(0x7f00000030c0)=0xc)
getpeername$packet(0xffffffffffffffff, &(0x7f00000031c0)={0x11, 0x0, <r20=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003200)=0x14)
getpeername$packet(0xffffffffffffff9c, &(0x7f00000037c0)={0x11, 0x0, <r21=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000003800)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003900)={'team0\x00', <r22=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000005080)={@loopback, @dev, <r23=>0x0}, &(0x7f00000050c0)=0xc)
accept$packet(0xffffffffffffff9c, &(0x7f0000005100)={0x11, 0x0, <r24=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005140)=0x14)
getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000005180)={@loopback, <r25=>0x0}, &(0x7f00000051c0)=0x14)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r26=>0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f000000af40)=0xe8)
sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f000000b700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f000000b6c0)={&(0x7f000000af80)=ANY=[@ANYBLOB='4\a\x00\x00', @ANYRES16=r5, @ANYBLOB="040825bd7000ffdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="e80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000000100038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000500000008000100", @ANYRES32=r8, @ANYBLOB="f401020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000004000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e00000008000400ffff000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000800000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000100010008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000300000008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="3c020200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000600000008000600", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r17, @ANYBLOB="080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r18, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r20, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000080003000300000008000400000000004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r21, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000600000008000100", @ANYRES32=r22, @ANYBLOB="b00002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000008000100", @ANYRES32=r24, @ANYBLOB="ec0002006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c0004000400ee0704000000ffffb98109000000ff7fdd010300000000027aff800000000200ffffffffff7f010000ff01000000060002ff070000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c0004006861736800000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r25, @ANYBLOB="08e8e2c6", @ANYRES32=r26, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040003000000"], 0x734}}, 0x800)
getresuid(0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f0000000780)='./file0\x00', 0x0, 0x0, 0x0)
r27 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r27, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)

05:52:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4c00000000000000]}]}})

05:52:56 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1)
ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000001200)={0x123, 0x2, 0xffffffff80000001})
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x3)

[ 1604.629869] binder: 2594:2598 ioctl 400454d1 20000000 returned -22
[ 1604.648436] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1604.661937] binder: 2594:2598 BC_FREE_BUFFER u0000000020001000 no match
[ 1604.698379] binder_alloc: binder_alloc_mmap_handler: 2594 20001000-20004000 already mapped failed -16
05:52:56 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mkdir(&(0x7f00000013c0)='./file2\x00', 0x2)
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000300)='./file1\x00')
r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r2 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="e7fc93b7891d48cc16fdf267cf679647faa737e2463a59390d314db7801b9e4a4931b279f0a1e3e3a9edd40142fbdb5bebe1f67f9c17168e33c957eb3a5ce4d2596f671c8977860a13bb39b60f396d046998ba559afdf58761e9fc03c6226fda51839de36871811964fbe8260a3e73e35e6cfaa581befad8", 0x78, 0xfffffffffffffffe)
r3 = add_key(&(0x7f0000000340)='.request_key_auth\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r2, &(0x7f00000002c0)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'vmnet1', 0x20, 0xfff}, 0x30, r3)
write$P9_RATTACH(r1, &(0x7f0000000140)={0x14}, 0x14)
r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$restrict_keyring(0x1d, r4, &(0x7f00000000c0)='rxrpc\x00', &(0x7f00000001c0)='trusted]selinuxwlan1eth1wlan0lo\x00')
ftruncate(r1, 0x8200)
r5 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x12, r5, 0x0)
readv(r5, &(0x7f00000007c0)=[{&(0x7f0000002300)=""/4096, 0x1000}], 0x3b6)
mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x3)

[ 1604.741943] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.762344] binder: 2594:2598 ioctl 40046207 0 returned -16
[ 1604.771578] binder: 2594:2609 ioctl 400454d1 20000000 returned -22
[ 1604.778923] binder: 2594:2614 BC_FREE_BUFFER u0000000020001000 no match
05:52:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x5, 0x40000010207c)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="500000009b0b653a487a9b535eff0300000000000055ee8520cd3c5955a8d12a1dea828b7014937d151d76e6174a1a4ab1fc8968c244d2efbdfed8a3488822e3f2a81f650f138ef81b5dfd63fb251c350cc985aa"])
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x6, @remote, 0x3}, @in6={0xa, 0x4e20, 0x800}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x7fffffff}, @in6={0xa, 0x4e24, 0x401, @empty, 0x8}, @in6={0xa, 0x4e20, 0x2, @remote, 0x4}, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1c}, 0x8}, @in6={0xa, 0x4e23, 0x0, @local, 0x100}, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x100000001}], 0xf0)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c202002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4800000000000000]}]}})

05:52:56 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0, 0x0]}, &(0x7f0000000040)=0x24)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r3, 0x4}, 0x8)
ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000000c0))

[ 1604.875898] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1604.903461] binder: 2629:2630 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29b902002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:56 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000180)="c6b7550d3daec87c74299e2fe8822ed92e9fc2b8ac2bd4707f5e197a79e603acf01c2f4bd7c3082de50b839674ccdbda6c0fba5bc5acf1c4a4639a36559367d7591b10bc68c8f4be5e16d4b67eda3db1180ecb35e7ec9251b8ac97da6227eb981b2d357c034fe362546474f2130239b592f8e64de6475b080d026fa9093083b9ff0cc9cc31c14bc17a14b9c092c6f296b24bf1c35cc83bd1f1c63d681077f126f8017e1991fed4ae824a1701be99504e02a07f07a33e0f0ff9", 0xb9}, {&(0x7f0000000040)="3825d4200a29575f5ca5f378fb28aa8605c2046535e878d425dc3bf3adf918af4b8b3d6f512bab4dacfb28eaa839c1ec7a727568de5fe5ce5f7898fca031392ea7f23b6daedc8ae3", 0x48}, {&(0x7f0000000300)="abe20b6a0835cee265f5e8be0c0eca41e2896c022ea7872f4c0b77d5b9797fa564138752e4553d87e98869ba58c787e5951c7388f5809bc53e2960e06f9c6d2139d75e3dea95645fc3a1c8c82e7f296c73e53bdcc9a2a35bd28a0583e8fd7677e5c3ac05aae1aebde220f37bd1cee65d27ea901d3785a1623eaea48d059206996ae4e6acedd47b", 0x87}, {&(0x7f0000000240)="d6f2ea32cd2b4470d92f8d5272b495bea3bbcebbd38ccdf59cb69c018d85fda5dc2d9f1afe1fed9c76b55d0ce5dbb68565308c583f4a9a4a4149159c97ee899085488aa05688559ee344cdd61715f04693c2e9797acac0137b357104f45d688d3cad37bec08fa6ffc5b0a704c58cc01adae9", 0x72}, {&(0x7f00000003c0)="4b87ba9e0a3791a21857a3baa60f8e2c94ef4ca856fe6f8701cbcbfb95cea1ccf5143f26cb3ad1f00f5230fe1ff41f8892345d2fe5107fa5ba7ee0d4c857da6337a2516a999d2ab13fbe5720c4f97e2ef82c13b1c7ea35d11e257af6d606dc48a5e09d846ac44cd07d8a714cbe3014d2e6f743dd277e90e55aaefe4f3f5395d61342326d279104617cce4d68ff53b283ca3dcd7e1d02803c52676883935bb3278b8a5b44", 0xa4}], 0x5, 0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:56 executing program 1:
r0 = socket$inet(0x10, 0xa, 0x40000000010000b)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000010a07031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x40010, r0, 0x0)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x9, 0x4)

[ 1604.981088] binder: BINDER_SET_CONTEXT_MGR already set
[ 1604.987385] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1605.015919] binder: 2629:2635 ioctl 40046207 0 returned -16
[ 1605.022472] binder: 2629:2630 ioctl 5382 200000c0 returned -22
05:52:56 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6000]}]}})

[ 1605.110564] binder_alloc: binder_alloc_mmap_handler: 2629 20001000-20004000 already mapped failed -16
05:52:56 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x1, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0)
ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000280)={"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"})
ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000180)={0x9, 0x5})
setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000fc0)='security.evm\x00', &(0x7f0000001000)=@sha1={0x1, "956a9b50eb9c59edfeb9fa2072b4f175caaf7ffe"}, 0x15, 0x1)
syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2})
lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.ima\x00', &(0x7f0000000140)=@sha1={0x1, "26b7fb4f0b0d36a5a624e2c434c53971fef41fa6"}, 0x15, 0x1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000680)="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")
ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000780))

05:52:56 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290229002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:56 executing program 1:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
futex(&(0x7f0000000040)=0x4, 0x0, 0x4, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r2 = request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\\trusted]md5sum!em1\x00', 0xfffffffffffffffc)
add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2)
r3 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8)
sendmsg$xdp(r3, &(0x7f00000018c0)={&(0x7f0000000300)={0x2c, 0x0, r4, 0x9}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000340)}, {&(0x7f0000000380)="9deec6446e", 0x5}, {&(0x7f00000003c0)="b1b8c5427080ed991f9d363c663685b202c817027ddb46238d5b82f84dcf5ed86fe1ed", 0x23}, {&(0x7f0000000400)="d6b2b1ba9d7bf8654efd5cdbee9464e568644e5b82d3560e289f2822a420c3144397c3a44b044241cd59ea36b07909ffbf98ec04fd62a7a49bf16b77bfc50624a6681e13e3a52d", 0x47}, {&(0x7f0000000480)="9861d3d052398889690ec4e4ecf0ac6bfb3971d80840e0e4c36b4a46a140420e6f05b6f18efa192d34a1ce39d6e39d72af121ee86ecf305462932dce08cb06affe47da03aaec088fd06fb15bd633057f4d3b09a4b1b6fa420ef903652e39a1698d958b81b8b62b958d0f1bf06ee02b831a1571a27de8cad05334efaa1e569f182296f24545c43a4dd2cda8f8ecab2412e8", 0x91}, {&(0x7f0000000540)="91ec357de98197b3196f5d80ff0da3a739ef1c04afadd1ff945171e197d52287699964bdaa976e3e3103de9745734a85f75ae2d3a7391c8778fc2c716d362d7131484edae668c07ebc7d1866130c81111a689601929c7ca6d1f0d76970d415c2c5f038ab39d7ef11234340171bf6c3fb6ec5b8a5ce650f0114c21cfbd0196b83b391a20e67d6d66cf18e37fab0ba86367269f8a70388f87f77b66e0f073eea704c98f2ff1d0c9dd78958ba32ac28e6c7fb0fb383f6847ae8433c26977398d70a2d15f8", 0xc3}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001640)="5cfb3bcbcd81ff3f11fc59875287d356ca409a1824925cfbcc8081561a804c3f645a86644021dd0a77a97e7866adb70dfed12e001e71001016254f69550311be8eba7a6543bc230be37d94f0bbe3c0849fba23074b397a417ddf4ca46f2371e7949942bfb7de318baf9b2518b32ab938324ab3080027e9a22941655ac98148a042b18e06a492ad67b2532fe5fbbc480297744bc4f519948bffb221053b96844c406131869c803385ee4f70f05a8f06a9aed807ac32265b3e1a67dadc81780100c82f023d", 0xc4}, {&(0x7f0000001740)="0c5e4a38aaec48a3784e24b91a5fe98ac59eff76e08243ac960d4142c39c6f9269cfae46b5a9b1ba8bfd411d4faf2ca3f688655fd5fd905c07e40a9d49a469bc2862c4159e83c4f321244a70da2081b549bceef6dde6b989a9561a6c0fe395177b1006ac8d15a1c97107c486417a04e7a5410d6a1d8c07c37e1c2ff1b7de4c8482fc66995a9215a13cee4478a23d1b42ec9a79f6ba72b8deeb35e841ac3342", 0x9f}], 0x9, 0x0, 0x0, 0x44000}, 0x4000)
tkill(r1, 0x13)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x8000, 0x0)
perf_event_open(&(0x7f0000001940)={0x1, 0x70, 0x2, 0x80000000, 0x1f, 0x4000000, 0x0, 0x81, 0x2040, 0x6, 0x40, 0xfffffffffffffffc, 0x9, 0x5, 0x22, 0x101, 0xff, 0x7, 0x800, 0x100, 0x8, 0x1000, 0x2, 0x6, 0x10000, 0x0, 0x6, 0x9, 0x8000, 0x80, 0x2, 0x6, 0x6, 0x0, 0x4, 0xc7, 0x10001, 0x22b2, 0x0, 0x80, 0x5, @perf_bp={&(0x7f0000001900), 0x4}, 0x40, 0xee, 0xffffffff, 0x7, 0x2, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xb)
r5 = syz_open_dev$admmidi(&(0x7f00000019c0)='/dev/admmidi#\x00', 0x100000001, 0x900)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001fc)
tkill(r1, 0x16)
futex(&(0x7f000000cffc), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x0)

[ 1605.156019] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.161604] binder: 2629:2630 ioctl 40046207 0 returned -16
[ 1605.161662] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1605.240664] binder_alloc: 2629: binder_alloc_buf, no vma
[ 1605.264194] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1605.278606] binder: 2629:2665 transaction failed 29189/-3, size 0-0 line 2973
05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290130002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:57 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x6, 0x40000000007, 0x100000000009}, 0x2c)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x28202, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x4, 0xcccb, 0xc, 0xff, 0x28, 0xffffffffffffff9c, 0x4}, 0x2c)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)=0x9)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000002c0)="ed94612ae4c1d7939f8c54bd825ccdae4504806dc813faaf0ca3803f65a466e9105a92d333f9c53a6679386e88bf40a72c0004000000000000db375a5f39282f6b953e279b89d8b6b386693074c436e3bd1fe17fbb9eedf4d18090b69b058ea511d9b7d0d8eccdba9f0d7ac463ce27aac848b8883418b8e6ddcdae9d1ab76f0eb042d260b94e23c0b85eadc723ba5b77df63ba3e9110f2fdd12f4f671f138c0beb09628b0a9d1f3c1fb1a6fa1921c71d8519f9ac577e9605505d14757a838be787e7496546bd46a84c22b2c45903798f466f9ea322f008111a17883d6aa29caeafcc1b4465542c3cd1b76196ebaa784e64", 0x0}, 0x18)

[ 1605.306840] binder: 2629:2635 BC_FREE_BUFFER u0000000020001000 no match
05:52:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6c00000000000000]}]}})

[ 1605.352797] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.371857] binder: 2629:2630 ioctl 40046207 0 returned -16
05:52:57 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup3(r0, r0, 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00')
ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0x1484000000000000, 0x6, 0x0, 0x6000, 0x20, 0x1f, 0x10001, 0x8057, 0x1, 0x7})
syz_open_procfs(0x0, &(0x7f0000001700)='fd/3/')

[ 1605.402320] binder: 2629:2679 ioctl 5382 200000c0 returned -22
[ 1605.460336] binder: release 2629:2630 transaction 980 out, still active
[ 1605.487210] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1605.502238] binder: undelivered TRANSACTION_COMPLETE
05:52:57 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x658, 0x100082)
r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xffe8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
sync_file_range(r3, 0x9, 0x40, 0x4)
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
connect$l2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @loopback}, 0x3, 0x3, 0x1}}, 0x26)
pkey_alloc(0x0, 0x2)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
fsetxattr$security_smack_entry(r4, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000100)='/dev/loop#\x00', 0xb, 0x3)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
sendfile(r1, r2, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f700002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0xffffffffffffffff, 0x800)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000300)=ANY=[@ANYRES32=<r4=>0x0, @ANYBLOB="88000000f72daf4b0eb80b57dec18cc2837a7c6b7bc9d868c0c60bca0c115ce6b6c12894b3e01992feaecb9aa0d10e0a52b3a1b3d1ff06fa85daa5222cc0e7866fa92990c92705080ca539fe0a7932f4304cb714041dd7c4925c675181d8ae42d0b876ee2808bb0b6f559108e11eb6a601acb676351d86f1369f5a7c5f41e5e86a7adae7c78fff81d88f715b031a60569f3c90daaae51a0d056f77368f7bf537135cf5c09ac0bea6134a9254a3f133ebba0ef6ff3ebe4ea1eb462ced6af762a5387442068b48ff948d35dd053840f89e888eeebad979a4126f38ba7e49438e0f6a4a54854f9aa61dc3861a16bebe7e9e92c453a1fce61ddd19ce66d812c7e9d50e05880f567dfd3a998a2d5141d7fe7b3aca7172ac76ba02630d54c333e1c508ce"], &(0x7f0000000100)=0x90)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000180)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000140)={r4, 0x8d}, 0x8)

05:52:57 executing program 2:
clock_nanosleep(0xfffffffffffffff6, 0x0, &(0x7f0000000000)={0x77359400}, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={<r1=>0x0, 0x0, 0xfffffffffffffffd})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={<r2=>0x0, 0x80000})
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000100)={r1, r2, 0x511})

[ 1605.509927] binder: send failed reply for transaction 980, target dead
[ 1605.549482] binder: undelivered TRANSACTION_ERROR: 29189
05:52:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x700000000000000]}]}})

05:52:57 executing program 1:
socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'md4\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={<r4=>0x0, 0xffffffffffffff9c, 0x0, 0x12, &(0x7f00000000c0)='wlan0ppp1vmnet1\\*\x00'}, 0x30)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000200)={{0x8, 0x7, 0x10000, 0x2, 'syz0\x00', 0x101}, 0x2, 0x20000002, 0x3, r4, 0x7, 0x1ff, 'syz1\x00', &(0x7f0000000180)=['syzkaller0\x00', '-systemGPL\x00', 'md4\x00', 'selflo]./losystem{\x00', 'eth0*selinux\x00', 'em1GPL\x00', 'syzkaller0\x00'], 0x4c, [], [0x4, 0x2, 0x4, 0xffffffff80000000]})
sendmmsg(r2, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x10, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)

05:52:57 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$kcm(r1, &(0x7f0000009f00)={&(0x7f0000009c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000009e80)=[{&(0x7f0000009e00)="f6", 0x1}], 0x1, &(0x7f0000009ec0)}, 0x0)
sendmsg$kcm(r0, &(0x7f000000c340)={&(0x7f0000009f80)=@can, 0x80, &(0x7f000000b000)=[{&(0x7f000000a000)="aa", 0x1}], 0x1, &(0x7f000000b040)}, 0x0)
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x67, 0x2000)
sendmsg(r1, &(0x7f000000fd00)={&(0x7f000000ea40)=@vsock, 0x80, &(0x7f000000ebc0)=[{&(0x7f000000eac0)='n', 0x1}], 0x1, &(0x7f000000ec00)}, 0x0)

[ 1605.660728] binder_alloc: 2698: binder_alloc_buf, no vma
[ 1605.682626] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290276002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1605.709486] binder: 2698:2699 transaction failed 29189/-3, size 0-0 line 2973
05:52:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6800000000000000]}]}})

05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902d1002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:57 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000180))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SMI(r2, 0xaeb7)
r3 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3ff, 0x400200)
write$FUSE_LSEEK(r3, &(0x7f0000000340)={0x18, 0x0, 0x2, {0x7}}, 0x18)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x8, 0x90200)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x6000, &(0x7f0000000100), 0x4, r4, 0x3})
timer_create(0x0, &(0x7f0000000000)={0x0, 0x32, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000000c0)=<r5=>0x0)
r6 = msgget(0x3, 0x10)
msgrcv(r6, &(0x7f0000001580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ecf29fe21e1af5f9a735424eafe521de3b27c14c48dbc551427621058c7875a64f3e834855cd810f01fbfd28e0c82cecd924617713c10cb3c883ecc3422013e4e73136d69a956449a168090f362d4bee"], 0xfffffffffffffcfe, 0x0, 0x1000)
timer_gettime(r5, &(0x7f0000000140))
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000002c0))
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e21}], 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f00000004c0)='./file0\x00', 0x14104a, 0x0)
write$P9_RSYMLINK(r7, &(0x7f0000000140)={0x29a}, 0x14)
setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0xc)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000100)='.\x00', 0x40224000000b)
sendfile(r7, r7, &(0x7f00000000c0), 0x2000000800004c36)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000040)={0x8, 0x0, 0x8})
write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[], 0x0)
r9 = syz_open_dev$video(0x0, 0xe15, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r7, 0x0, 0x48c, &(0x7f0000000400)={0x0, 'ipddp0\x00', 0x4}, 0x18)
ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, 0x0)
lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x0)
syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8, 0x0)

[ 1605.803776] binder: BINDER_SET_CONTEXT_MGR already set
[ 1605.809429] binder: 2698:2710 ioctl 40046207 0 returned -16
[ 1605.819981] binder_alloc: 2698: binder_alloc_buf, no vma
[ 1605.829875] binder: 2698:2699 transaction failed 29189/-3, size 0-0 line 2973
[ 1605.838951] binder: undelivered TRANSACTION_ERROR: 29189
05:52:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10, 0x99e, 0x80, 0x3000000}, 0x2c)
io_setup(0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000c80), &(0x7f0000000cc0)=0x1c)
ioctl$sock_ifreq(r2, 0x89bd, &(0x7f0000000d00)={'erspan0\x00', @ifru_hwaddr=@remote})
r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x400000, 0x0)
r4 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x1fffffffe00000, 0x100)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0x0, 0x0)
pipe(&(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000880)='/dev/dlm_plock\x00', 0x4000, 0x0)
r8 = syz_open_dev$mice(&(0x7f0000000a80)='/dev/input/mice\x00', 0x0, 0x200)
io_submit(r1, 0xa, &(0x7f0000000c00)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x2, r0, &(0x7f0000000100)="ed517f75960685b02cfb34f3d9c5108e36928f78e1905598cd56da8a73b599513b1eec8f9a333fbc7600a015124cd34e1818fbebffa42dce5157422bd4a475f496e1ee48b35c10585b46f52846483ba94e8eaada8061834cfdd837cc1aad8ec55f789ffce6a29b", 0x67, 0x3, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f00000001c0)="cdc466ff05312c27eb5fe8f227819b12ad934e4801f149f565800eff6b5a218d7e3e0a5d1593232cf344d84ad857d7d2bbde2279acf66985186f1892fef97b2adabad93aeef2f3547e230041f61c2045a3890438642724a76624b9bfcbe801385b4019875f5e5149cb9a74be691e22679a625aea8eb785666bdf4de3b2a943c17d9ead70f8d957c433b7b41bcecb1e77414cf822397bd79eb3e2629bbe8afcbb01d552d5cb2fbdd0492ac0ca5a1b511167312fc22d3c19fd0afcbd5b568b0f7b1a4b1bf71d48c2c585bc6eae223f45f6c409388c76c5e99fbfab25764182a839a938e03712fe29", 0xe7, 0x1ff, 0x0, 0x1, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0x5, r0, &(0x7f0000000340)="2c063d9cc2d0b094a5ee09284f2d0ded7fccd47ce0f7b47a2c7dba627f4ab81f5e2f7f8792391cb8412a584bfc2b6e235f683898886d7647f47fa26f7a62903c606aa70835464b7dcf2fa722b40350559bcdfd13f9ab9fc06c308a7697474583bc44402d25b1844dd16e1e801aaa99587bdd3519f80a16c52284548e462f4df2f016ed481bcfd4d0d2c6255d4e0f3e7613dc231539235d415119d218811de869bd184921", 0xa4, 0x15d2, 0x0, 0x0, r4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x100000000, r0, &(0x7f0000000480)="b30c708967372cf78a0ceb5bf02570d720ab355c6e4a386f73c68bdfba80de446a1be8d20b75ea7b52d9cc669ec3d64f95322ef3accbff387b91665f79c870f5844968716645a42b87dc52dcac3e6548c5c1fdc329335dc9ba2795e2e1ce041c36674ca240c8e217baca55319fc60c9a15565a32b9c857fa910b632bc1389d906e98aaef030ab17dd461d449a0633847c34f9925a73eed096e22d36bfdc85483289f61baa4ef8fabe60141ad0eee71a353340cecb4e8383ecf7abd135e9f", 0xbe, 0x1, 0x0, 0x0, r5}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x7, r0, &(0x7f00000005c0)="41a12888014b5a056adadd96e8e05790af772d2762da3ce53cc540263136ef65d1047a1804ea15d20da06a32d65a014b6ac1368d7f2be7cbb3304f3005e38a0ed2870b95aba7f15d439c0e3ba3845b29e440a99f856dfa3a3da5aca88ef3c9709b8031a52142a90df7e7f755c4542be435361e18c48f5f35707e30a14cc6f19b5764dc89486a366d621495dbb950c12958e1457996bd283b80fccf538535d94b785b9eb3f6b651e3d82ced75f1e0fdcc6665a4cd0a5a7aa097b0a086fdb001578de2051c403091da216a6ac4d0a11e231c268402af319bd75c31b90431fd6d1c314edadbebbc7a62", 0xe8, 0xb06}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x5, 0x93, r0, &(0x7f0000000700)="b51cf1eefa9d1992042cd93e", 0xc, 0x0, 0x0, 0x0, r6}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3, 0x8, r0, &(0x7f00000007c0)="b577653d58c11b686120baeaa2e0678f90246a40c27d9d59a2b84e440c054a2149870072778fa055b655d1b1b37a269d4968985e99a2846173d0476490d51f5d3289e4800701dbd8fa75b29c0731e4fa91dc0738fff4ea2a884df6966267093c8ca8b6160b2e8487bfa4d880a5d1875b67980b41089d4b606268c99e25fc4ea91fecd39c22c8f1d0e2e9621de210a87fdb5059c6", 0x94, 0x1, 0x0, 0x3, r7}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000900)="395deb4f527264b973eb835a639d3428cc6431351d7643baf66ec34369b758412b6d68d6e649ba70", 0x28, 0x10000, 0x0, 0x1}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x5, 0x8, r0, &(0x7f0000000980)="70caec6dff22493dc4117a638c7d89702d0fcd8bea2fc351c9d604a3ddb02bd1d4174499aca020a942f19d7f7a87959cfd95fba685bc8b18096f4114a018a1a0115b3c8c90110f7da1f847d6c7c9e73cb0b68429d0fc509421efb584821adfc31047c03c7163ba54932772f935826a557019aac7b1970e2016b7899e17c4302fb0021b1db30c2adfc3c2ef82b13cd1cd5ca30644d1a5dd9ce95c6f1c536d12138cf75a04da666cd307348ffd5b73ad7d96b0313f75638443ca75b3a4995ff0314f71bbd8cdc6dee31bdcdb", 0xcb, 0x3ff, 0x0, 0x2, r8}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000b00)="e6f978c35187e06a10782cf088839b624086d28ce01cba98526c5756f6bcf32ddef2d6b86648271d27035447abe143c83e676946eb8f0bab44cb6db9716d71047309a77081938b9e775f828ec544146c8c30a4878bf733143989e964570fdc3ffb0acec89cefaf78d48d29120892e1712b2a0a42210261e37264b2c7f95f4777a0eb7b007dfae9a0a401f3dfbed3eaf0978f2423a4b525b011d3e09620892f183f6c7b850061b6964351559378225b910612b0a215c033dc632fd76681", 0xbd, 0x0, 0x0, 0x2, 0xffffffffffffff9c}])
rt_sigpending(&(0x7f0000000080), 0x8)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x7f, 0x8})

05:52:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0x100)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010628bd7000fcdbdf25010000000c00060001000000000000000c00060002000000000000000c0008000900000000000000"], 0x38}}, 0x41)
r3 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f00000003c0)='/dev/usbmon#\x00', 0xfffffffffffffff7, 0x8002)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180)="a6ac27174c254b036f48ee6ac28349113c72451e6d1e2b3e4aa7bece546cc4c488448447783188db9ae6f64a485e6c6cf60612f23e8240583deee5d36ef3bf3297ab703d55800b89a675d3541b0b9af491263accd63bfe859f4983da4bef54a8ca85ba5a3dd843745cc40573d66432ca762d4a34759dd31e43c9da0b2377ed9e2b13098c80ed73001ec51f2610b52972c71332cc", 0x94, r4}, 0x68)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
r5 = add_key(&(0x7f0000000400)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, 0x0)
keyctl$get_security(0x11, r5, &(0x7f0000000480)=""/36, 0x24)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3)
sendfile(r0, r3, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:57 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0)
ioctl$VIDIOC_G_AUDIO(r2, 0x80345621, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x1dd, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0, 0x0, 0x0})
r3 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2)

05:52:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x3000000]}]}})

[ 1605.881083] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1605.903617] binder: undelivered TRANSACTION_ERROR: 29189
05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295f00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1606.007106] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1606.015681] binder_alloc: binder_alloc_mmap_handler: 2736 20001000-20004000 already mapped failed -16
05:52:57 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x600]}]}})

[ 1606.110306] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.187749] binder: 2736:2737 ioctl 40046207 0 returned -16
[ 1606.191499] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:57 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x242, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000580), 0x0)
munlock(&(0x7f000004c000/0x2000)=nil, 0x2000)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, 0x0, 0xfffffffffffffffe)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, 0x8)

05:52:57 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298701002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0005561d9774162f5909953e6b6985ecc0ef0f52fcf9efa9859bc698cdecfe423e4351215aafd34fa7098da5d4a4303d1b46c7879c946c52da4e34136aa481c3db9b1ef80d1162d6a934b010b815a27f420d90a95f75aa5600d3c791d8078c7e038532f01e1cc109257899468b5b3a040f419ad15fad229c3fe0e40c17e59bccb59fcc02306049ee0f611580f964aa06ded34e100736ee0127f84b32096aac11210e9810752ddb85b638dda4228a85b16a99e883af3ef8257f595a5bd91ad91343334a3f6a02b60000000000000000000000000000"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x620002)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2f5, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
setsockopt$inet6_dccp_int(r0, 0x21, 0x0, &(0x7f0000000200), 0x4)

05:52:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4c00]}]}})

05:52:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1606.408576] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1606.422450] binder: 2766:2768 unknown command 492176640
[ 1606.465114] binder: 2766:2768 ioctl c0306201 20007000 returned -22
[ 1606.515848] binder: 2766:2768 unknown command 0
[ 1606.549042] binder: 2766:2768 ioctl c0306201 200002c0 returned -22
[ 1606.585003] binder_alloc: binder_alloc_mmap_handler: 2766 20001000-20004000 already mapped failed -16
[ 1606.595771] binder: BINDER_SET_CONTEXT_MGR already set
[ 1606.619308] binder: 2766:2780 ioctl 40046207 0 returned -16
[ 1606.673589] binder: 2766:2780 unknown command 0
[ 1606.702773] binder: 2766:2780 ioctl c0306201 200002c0 returned -22
05:52:58 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
creat(&(0x7f0000000000)='./file0\x00', 0x20)

05:52:58 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2c000, 0x0)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)={0x2, 0x11000})
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000200)}}, &(0x7f0000000040))
timer_getoverrun(0x0)

05:52:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:52:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x3]}]}})

05:52:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000040)={0x10000, {0x2, 0x4e24, @rand_addr=0x7}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @local}, 0x80, 0x8, 0x3ff, 0x0, 0x8de8, 0x0, 0x0, 0x40, 0x10000})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
pipe2$9p(&(0x7f0000000100), 0x80000)

05:52:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900af002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1606.834983] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1606.871497] binder: 2794:2801 unknown command 0
05:52:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x500000000000000]}]}})

05:52:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="298800002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1606.896567] binder: 2794:2801 ioctl c0306201 20007000 returned -22
[ 1606.932219] binder_alloc: binder_alloc_mmap_handler: 2794 20001000-20004000 already mapped failed -16
05:52:58 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)="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")
fcntl$notify(r1, 0x402, 0x2)
getdents64(r1, &(0x7f0000000340)=""/4096, 0x3b8)
sendto$packet(r1, &(0x7f00000000c0)="6feea4298b704c396a0552db6d141df4c43157d207e4837f98a7594fce9825edca998a09f139dddf96b5ec9b71ff795a84948bcfd0bafbec254b93abee3ba4a9bdc683fa4fe58c05cdec5452c6a4b652400726d01b7a006cd9d0fb38ef46a17d226c9cc8e2", 0x65, 0x20000080, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000000)="d5e6a455a5bde4c70adae3e42d8bca41282aca019a09ab5db7e5df090f2d6f9c87bc2e49021a080fd770c9af9d72dcdf8eb93b047dccb7e6af9c457f7ffee87fe620b8dfda9bed61813b5e69cb6681d53f93885dae9b1ecaed2382f56defb49a3751ee8e4c1236b67b9dfe022428cbbd5017c2939640c4aa36d15c5264772c2b22b89f5baa6c9cebea06629dd031e00c8ce13dee47a853cff68bc0f8225bed4e", 0xa0, 0x0)

05:52:58 executing program 2:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000200)={0x5})
fcntl$setpipe(r0, 0x407, 0xfffffffffffffeff)

[ 1606.954094] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.030303] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.040411] binder: 2794:2801 ioctl 40046207 0 returned -16
[ 1607.072457] binder: 2794:2808 unknown command 0
05:52:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x5000000]}]}})

05:52:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29af02002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:58 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x500000000000000]}]}})

[ 1607.093890] binder: 2794:2808 ioctl c0306201 20007000 returned -22
05:52:58 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0)
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21800071cda8736f5e5a00e800", @ANYRES64=r2], 0x0, 0x0, 0x0})

05:52:58 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r2 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0x42)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000040)={{0x0, 0x2, 0x5, 0x3, 0x1}, 0xfff, 0x3})
pwritev(r2, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffedc)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0)
fdatasync(r1)
sendfile(r1, r2, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1607.155077] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.194384] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:52:58 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x500]}]}})

05:52:58 executing program 1:
r0 = socket(0x10, 0x802, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x13}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffffffffffff}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x94}}, 0x44004)
pread64(r0, &(0x7f0000000000)=""/157, 0x9d, 0x0)

05:52:58 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="295a00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1607.290000] print_req_error: I/O error, dev loop0, sector 0
[ 1607.302327] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.338605] binder: 2840:2844 unknown command 1895858209
05:52:59 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0xe)
r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x81, 0xc)
r2 = msgget(0x1, 0x100)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000180)=""/64)
dup3(r0, r1, 0x80000)
r3 = memfd_create(&(0x7f0000002901)='dev ', 0x0)
ioctl$void(r3, 0x5451)
write$P9_RXATTRCREATE(r3, &(0x7f0000000100)={0x7}, 0x7)
ioctl$DRM_IOCTL_MODESET_CTL(r3, 0x40086408, &(0x7f0000000080)={0x733a, 0x800})
write(r3, &(0x7f0000000240)="8a5a8f775e382cc28b8b97a28ff0dbebda83bcc25e98de93eca95ff1520777dfb98cff9886ec6364454fa6788c345af74972e52434c7c2be10e10b3567dba77f0ba55b24ab", 0x45)
write(r3, &(0x7f00000001c0)="7b560afae7b9bb6c654f42cca68b0556a9aac4fb00000000d96cf2f1133a34915386c68a880066063008000000000000008f8420ff3eeeb7b51366d019bc6ca71ff04072a7", 0xf9efa215)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x53, r3, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f00000000c0)={0x3, 0x7f})
rt_sigtimedwait(&(0x7f00000002c0)={0x5}, 0x0, &(0x7f0000000040)={0x77359400}, 0x8)

05:52:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x3f00]}]}})

[ 1607.379282] binder: 2840:2844 ioctl c0306201 200002c0 returned -22
05:52:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
pread64(r1, &(0x7f0000000180)=""/233, 0xe9, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:52:59 executing program 1:
r0 = socket$inet6(0xa, 0x803, 0x3)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070")
r1 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000005a0007041dfffd946fa2830020200a000a000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0)

05:52:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29f201002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1607.429252] binder_alloc: binder_alloc_mmap_handler: 2840 20001000-20004000 already mapped failed -16
[ 1607.440798] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.492365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'.
[ 1607.513339] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.534978] binder: 2840:2844 ioctl 40046207 0 returned -16
05:52:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299901002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:52:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x3f000000]}]}})

[ 1607.537821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'.
[ 1607.554042] binder_alloc: 2840: binder_alloc_buf, no vma
[ 1607.561216] binder: send failed reply for transaction 989 to 2840:2844
[ 1607.574062] binder: 2840:2858 transaction failed 29189/-3, size 0-0 line 2973
[ 1607.583892] binder: undelivered TRANSACTION_COMPLETE
[ 1607.614676] binder: undelivered TRANSACTION_ERROR: 29189
05:52:59 executing program 1:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3f00000000000000c440cc2fcc1ff5dbe6d0680cd9be48d8"], 0x0, 0x0, 0x0})

05:52:59 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
sysinfo(&(0x7f0000000040)=""/245)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x80000001, 0x3, 0x3ff, 0x4, 0x0, 0x3})

[ 1607.681201] binder: undelivered TRANSACTION_ERROR: 29189
[ 1607.710832] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.750571] binder: 2882:2884 unknown command 63
05:52:59 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29028b002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1607.774197] binder: BINDER_SET_CONTEXT_MGR already set
[ 1607.784535] binder: 2882:2884 ioctl c0306201 200002c0 returned -22
[ 1607.795210] binder: 2885:2886 ioctl 40046207 0 returned -16
[ 1607.803917] binder: 2885:2886 unknown command 3
[ 1607.804300] binder_alloc: binder_alloc_mmap_handler: 2882 20002000-20003000 already mapped failed -16
[ 1607.814005] binder: 2885:2886 ioctl c0306201 20000000 returned -22
05:52:59 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7]}]}})

[ 1607.831504] binder_thread_write: 7 callbacks suppressed
[ 1607.831515] binder: 2885:2886 BC_FREE_BUFFER u0000000020001000 no match
[ 1607.838684] binder: 2885:2886 ioctl 40286608 20000140 returned -22
[ 1607.854729] binder: BINDER_SET_CONTEXT_MGR already set
05:52:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
getsockopt$inet6_dccp_int(r2, 0x21, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[ 1607.884396] binder: 2882:2884 ioctl 40046207 0 returned -16
[ 1607.897325] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.909943] binder_alloc: binder_alloc_mmap_handler: 2885 20001000-20004000 already mapped failed -16
[ 1607.923131] binder: 2882:2895 unknown command 63
[ 1607.933967] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1607.955882] binder: 2882:2895 ioctl c0306201 200002c0 returned -22
[ 1607.980030] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.013327] binder: 2885:2902 unknown command 5
[ 1608.015450] binder: 2885:2886 ioctl 40046207 0 returned -16
[ 1608.022533] binder: 2885:2902 ioctl c0306201 20000000 returned -22
[ 1608.031230] binder: 2885:2902 BC_FREE_BUFFER u0000000020001000 no match
[ 1608.039016] binder: 2885:2902 ioctl 40286608 20000140 returned -22
05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290259002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2]}]}})

05:53:00 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070")
socket$inet(0x2, 0x3, 0x6)
r1 = socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$FUSE_INTERRUPT(r2, &(0x7f00000000c0)={0x10, 0x0, 0x5}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x14, 0x7, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}, [@generic="667e279639a91d7bd91397917daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360c00000015739d53d5"]}, 0x48}}, 0x0)

05:53:00 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x28})
ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000300))
r2 = getpgrp(0xffffffffffffffff)
ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000280))
ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000140)={&(0x7f0000000100)=""/51, 0x33})
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0xffffffffffffff37)
r4 = accept$alg(r3, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'bctf0\x00\x00\x00\x00\x00\x00"\x00', 0x6})
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000000c0)={0x1, 0xffffffffffffff9c})
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)

05:53:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634940a739be984f44f4c67301d350c8950f885d5349d2388f096fc5f52bea09214ecb3a1622992cba86884b9a422d031c652b206de40a9f58fbb27866849543c99cd2df1d9a066f7ea7c6b3afc2f2bec800e8c4e06e9f604753ad1ec8fe671223a39db0a84adb9d1c6a3534b4051b07c880995b5b0c8a4c8099921e75e45b959ed866272291b7ed986e1f8a44926986180ab68faf3849f8ea4bdef905a0f70f2872a22c5dc2bd98a076468aa51683f252f25fae27276cfdee9bd7e4e7a5177851c7ae00ebdeba1e2ca5e763fafd85"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000040", @ANYRES64=r2], 0x0, 0x0, 0x0})
r3 = dup(r0)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0xc200, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000780)={<r5=>0x0, 0x80000, r3})
ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f00000007c0)={r5})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000580)={0x8, @capture={0x1000, 0x1, {0x7, 0x7}, 0x4, 0x6d}})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r6, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x6, 0xfff, {"c6d12564598b29d2493a8e58786671a6"}, 0xe6f, 0x19}, @in={0x2, 0x4e24, @empty}}}, 0x118)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x106, 0xe}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x6926, 0x1, "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", 0x72, 0x7ff, 0x2, 0x1, 0x9, 0x8, 0x4}, r7}}, 0x120)
r8 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x0, 0x400000)
getsockopt$inet_tcp_buf(r3, 0x6, 0x1f, &(0x7f00000006c0)=""/95, &(0x7f0000000740)=0x5f)
ioctl$FICLONE(r8, 0x40049409, r3)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000680)=0x5, 0x4)

[ 1608.373239] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1608.381228] binder: 2908:2913 unknown command 1078551313
[ 1608.390419] binder: 2908:2913 ioctl c0306201 20007000 returned -22
[ 1608.407936] binder: 2908:2913 unknown command 1073741827
05:53:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x300000000000000]}]}})

[ 1608.420044] binder: 2908:2913 ioctl c0306201 200002c0 returned -22
05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29027d002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:00 executing program 1:
ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000200)=<r0=>0x0)
process_vm_writev(r0, &(0x7f0000001600)=[{&(0x7f0000000240)=""/26, 0x1a}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/225, 0xe1}], 0x7, &(0x7f0000001700)=[{&(0x7f0000001680)=""/110, 0x6e}], 0x1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
shutdown(r2, 0x0)
r3 = gettid()
sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00'], 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x200440c4)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
geteuid()
bind$inet(r2, &(0x7f0000001740)={0x2, 0x4e24, @loopback}, 0x10)

[ 1608.447558] binder: 2908:2913 ioctl 40086409 200007c0 returned -22
[ 1608.473412] binder_alloc: binder_alloc_mmap_handler: 2908 20001000-20004000 already mapped failed -16
[ 1608.473885] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x100000000000000]}]}})

05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2902b7002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1608.555690] binder: 2908:2925 unknown command 1078551313
[ 1608.586767] binder: BINDER_SET_CONTEXT_MGR already set
[ 1608.622720] binder: 2908:2940 unknown command 1073741827
[ 1608.622979] binder: 2908:2925 ioctl c0306201 20007000 returned -22
[ 1608.633426] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:00 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0xa0000)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000080)=0x101, 0x10000025e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0x6}, 0x1c)
listen(r1, 0x0)

[ 1608.663538] binder: 2908:2940 ioctl c0306201 200002c0 returned -22
[ 1608.725590] binder: 2908:2935 ioctl 40046207 0 returned -16
[ 1608.748245] binder: 2908:2925 ioctl 40086409 200007c0 returned -22
05:53:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000040)={0x5e, @multicast2, 0x4e23, 0x4, 'fo\x00', 0x1, 0x400, 0x62}, 0x2c)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
accept(r2, 0x0, &(0x7f0000000080))
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:53:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x68000000]}]}})

05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290114002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:00 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
pipe2(&(0x7f0000000240), 0x84000)

05:53:00 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000000, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a102002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:00 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0xffffff7f]}]}})

[ 1609.049734] binder: 2965:2967 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:53:00 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="293501002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1609.132336] binder_alloc: binder_alloc_mmap_handler: 2965 20001000-20004000 already mapped failed -16
[ 1609.156953] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1609.181453] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.213343] binder: 2965:2967 ioctl 40046207 0 returned -16
[ 1609.283302] binder_alloc: 2965: binder_alloc_buf, no vma
[ 1609.327750] binder: 2965:2974 BC_FREE_BUFFER u0000000020001000 no match
[ 1609.333994] binder: 2965:2982 transaction failed 29189/-3, size 0-0 line 2973
05:53:01 executing program 1:
socket$packet(0x11, 0x3, 0x300)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x15, 0x800, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x87, 0x3f, 0x8, 0x6, 0xce, 0x800, 0x6446, 0x3}, &(0x7f0000000100)=0x20)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140), &(0x7f0000000180)=0x8)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_team\x00', 0x8}, 0xa)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002bc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="64000000764d0b8081e9fbcbddce62193fd20f1d4c83648cfda8600429f6cd29b2319824bae0894f1297fa9a4741a2f89673a094d099586b9d5b4962c0c827d6e74ffb4144d00cecb94791b0a62db3419daf98caabf643552b89ac06c955932ba74704b15886f8b2"], 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002a80)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000027c0)=[{&(0x7f0000002640)}], 0x1}, 0x800)
ioctl(r0, 0x8916, &(0x7f0000000000))
ioctl(r0, 0x2, &(0x7f00000015c0))
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141048, 0x0)
close(r2)
syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x40000003, 0x10507e)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000e5b000)={0x2, 0x2004e20}, 0x10)
ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000400)={0x20, 0x40, 0x0})
connect$inet(r3, &(0x7f0000ccb000), 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="189431b104b89332736d0000000000000000"], 0x0, 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48)
r5 = socket$kcm(0x29, 0x1000000000002, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000001580)={r3, r4})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000003c0)={<r6=>r0})
ftruncate(r4, 0x4)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000300)=0xe8)
r8 = getegid()
chown(&(0x7f00000016c0)='./bus\x00', r7, r8)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000001500)={{0xffffffff, 0x2}})
close(r5)
sendmsg$rds(r6, &(0x7f0000001c00)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40), 0x0, 0xffffffffffffffff}, 0x0)
close(r6)

05:53:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x7c, 0x14, 0x922, 0x70bd2b, 0x25dfdbff, {0x1f}, [@generic="c95d6ce952ca1ac6cb38e56999bea9b6bb929dcfdff0ad68b12b44a3a46cdf70562788492f74210db3c8b83076bdbd2796bf45e6da28f7946caa2d9c9ee853b425e1790bf857e0aaeeb194380e74fff43c87c591198037f8c0379d6a60bb177782f1c5b01c"]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x80)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:53:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x2000000]}]}})

05:53:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290118002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1609.374467] binder: send failed reply for transaction 994 to 2965:2967
[ 1609.385941] binder: undelivered TRANSACTION_ERROR: 29189
[ 1609.432736] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29024a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802)
r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x46c7ecf3, 0x204000)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000040)={<r3=>0x0, 0x8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x20}, &(0x7f0000000100)=0x8)
ioctl$VT_WAITACTIVE(r2, 0x5607)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'erspan0\x00', 0x200})
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000140))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

[ 1609.509931] binder: undelivered TRANSACTION_COMPLETE
[ 1609.518788] binder: undelivered TRANSACTION_ERROR: 29189
05:53:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x6c00]}]}})

[ 1609.669671] binder: 3003:3004 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1609.697218] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1609.751189] binder: BINDER_SET_CONTEXT_MGR already set
[ 1609.758487] binder: 3003:3013 ioctl 40046207 0 returned -16
[ 1609.764510] binder_alloc: 3003: binder_alloc_buf, no vma
[ 1609.770728] binder: 3003:3013 transaction failed 29189/-3, size 0-0 line 2973
[ 1609.777054] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1609.784297] binder: 3003:3013 BC_FREE_BUFFER u0000000020001000 no match
05:53:01 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000100), 0x12)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0)
pipe2(&(0x7f0000000240), 0x84000)

05:53:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29dc00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x4800]}]}})

05:53:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
r2 = semget$private(0x0, 0x3, 0x240)
semctl$GETNCNT(r2, 0x0, 0xe, &(0x7f0000000180)=""/132)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0xffff, 0x8)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1609.813576] binder: release 3003:3004 transaction 997 out, still active
[ 1609.825314] binder: undelivered TRANSACTION_COMPLETE
[ 1609.842502] binder: send failed reply for transaction 997, target dead
05:53:01 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})

[ 1609.905255] binder: undelivered TRANSACTION_ERROR: 29189
05:53:01 executing program 1:
r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xff, 0x40000)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@hyper})
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x2)

[ 1609.961824] binder: 3029:3031 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1610.000495] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:01 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="294e00002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:01 executing program 1:
r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x96e, "563d7028129fa759d8d2c8d6d1fb281150a3222da17d61c224f8bf76314f71d4"})

[ 1610.084774] binder_alloc: binder_alloc_mmap_handler: 3029 20001000-20004000 already mapped failed -16
05:53:01 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x7a00]}]}})

05:53:01 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
sendto$inet6(r1, &(0x7f00000001c0), 0x21d, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
readv(r0, &(0x7f0000000680)=[{&(0x7f0000000280)=""/135}, {&(0x7f0000000340)=""/188}, {&(0x7f0000000400)=""/8, 0x60020}, {&(0x7f0000000440)=""/77}, {&(0x7f00000004c0)=""/221}, {&(0x7f00000005c0)=""/5}, {&(0x7f0000000600)=""/108}, {&(0x7f0000001480)=""/4096}], 0x100000000000007f)
setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e22, 0x8e, @mcast2, 0xffffffffffffffe0}, {0xa, 0x4e22, 0x2b67, @dev={0xfe, 0x80, [], 0x15}, 0x6}, 0x2, [0x91, 0xffffffffffffffff, 0x3, 0x3eb6, 0xfff, 0x101, 0x4, 0x1]}, 0x5c)

[ 1610.185251] binder_alloc: 3029: binder_alloc_buf, no vma
[ 1610.185743] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.211739] binder: 3029:3044 transaction failed 29189/-3, size 0-0 line 2973
[ 1610.262415] binder: 3029:3054 BC_FREE_BUFFER u0000000020001000 no match
[ 1610.302101] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29c502002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x27e, 0x80400)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f0000000780)=[{&(0x7f0000000100)="d7623dec4a4fe0887875403a3245077fd926da001cd58f2760535c3d35c1f428ef1a5deffac7aa6f71e4a660e8ceb008d7565a30058a136e150e3a1fb2"}, {&(0x7f0000000180)="bfa660f096b15e8394bcc78c2766d3ddfeea3eeb32172e77b410d1cc702a24559da7f7c2c01d4ee33e1da130a6ef0b9d684fd22127ede145334be96858df3a080dbcc3b0d6183f8a32a4a9c5154e2433ac"}, {&(0x7f0000001cc0)="f2115392451b67baffbecb71c6204ceb6b755ad9963c3b59f2fcd8239023f78de930c0590474a1142aa522c0e37d089d5aee6de22426a017f99381d6f95a96d5a6c6e92127672f362f85eecd6e4f0945325527164b8a730f0a958501010000a1149beed85efd0b3e0cd9591cddb50dbe3b7e102b72acd3e4a77c746a5e9b48e966efb48828947b5cbf32e0e9a159fb6da80564b09b6ed1412ccfa4f2916f14d1f83c4549525f9fd7caca880f1bdaf9153d79b5a6973553c3a33ddfd515cbf7bb66d48dd830ef644406a0cabf18e944c027bba40173a2f7339e7a8998e64ee3fb278a7abbcd91e8bcf67128f007010e7cd7e3807e15133c97d0090b7eabb228a2212c3fc7d46219cad3c816dd63233102d288d098781f435e4f6b68f90d65089f9f9056d3e58e931c04e0ae6c5b9e98f68225b786ea1df4d90debdcc02b44391f14dcdf3293412f66a5725fe8165dc66a4d644f9a2d9d54d12f72361e8d98bbf4f1baf3dcc65e845cd87a1dae83ad7951f706861b37ab62d4c532aaef0894e492106cb0a3cb1429623d60422ec18f7ec820a73088ce91839d6ab30893ba4c94d7a8f8e8e1e43e5507980df82a1b3476bd4145516a59758ef6226906108fce7e08f2e0cde0b8f279bc4eb07ab63852b8410b475c054e702a968a0e1fa3e5f2ea6195b6e20455cfe02cf492a278b2443dddc3d1faec9f73f1d08aa779ff4662321307eb51958d4f32ee71695bca250ca2be537fafd4849bee4030a6a515c7a20e631a00ff85a94aebb48973c006a00427c9bdee7494f187be390b0f7e16bb2ec0bfe3636bebd2d4864cb847f3ea7ceef40f38536712d73c0744b4c9a50b5c5b09b97ca0f794b59558538ffbe3fc3ed98326694b93891802b87659b09daed27a3b6282b85f8a8fd8c08c79e8f28d6d10323f817d4fd5ca6c2b23f5bf373b885764258f09c957f0fdc8b323588077e2c491c62dd00f346c574e5f9d1dae05c036d58b582f1eb06765b49bcf7b85e4c69c8dba86020b408c8cd62139c31ad952803b1e30bfcf8499c9cde9c86af8c0fde1609267f9677e7326110dfc998434e8c616361a081a4c4b3f4bbc9a12b695da4078708dbd91e9cae112d52b503f70951cc70892e158dfc4e8e0f5e0fb65befe0b62351ebf027327a07d8a2e120ca75584004f5337aa4125d943b5ab33008618caaa97a263e280fe0f6c5756c4c59f9ca590153b781b3b74f006db0ccba6092e8d5edb424d396fb3f9f3a7bef8f4f062467923b7c01e7918ac1ebc57071cf94d6a71be883a3e4aa884b2cd7756a81ed1a730471b60afe217f9d2d09554a84e994fc2b28adea3f7f544cff82559760d0f9eb9828020acd592f0b426dabbcc31b33a87cd92df4b555bca3a7ace7a6b8d78ab2f9d2737a6d754b6ee14817cf1db69d0495bc660479e161d67379cd1fdb20c91b9098a50db4bbcc82ea91af4c4a0695f84577b6c7374c2da366d25a123456459486a505b9d4adb449e6185a60777c34d5dd250efe6a650ee7f6a04ff9f4bb0e96df8ec00c3574208cd721cd18bbeec9362c3204d244ab517a9cd5c253347e84addb183f4f970d031fdddc1b18eeaab3f63e495eb4ca0d663303781b2e06dac3df179dc42d2e2b99fad7d1b7ffe94f5890f36122b550f01d7e62accd51dd8270d2a5522f325111f2fd06b146b40250cc5b6689b8372871e1f3d87993b6005aaa2083e538172598c4d975ef30956b5e793c523cd14aac5d74a670dd7786a9eacee9d0a85f26ada2e1c56b462c107d99dabeab01b760c70437fd9e3d4b9b87933cef6d8658fb8379cdfd08a901c48e0779e57e6d9998447a30b28cbc6c8f984d63eeadd87991cdada777606e9aa85e9e2f213cf6d5c9b29d6b165d824a08059f7ff6c8d921f7480701dd748d5fcc09c2c117bd4f2547f367e5415c90ca105748502c97dcc3b9a6f8901d444e013ba0d8860ba6b6e14ddc351e207292d002224077348f6c6eecb1088b6581033e770df790f730f38dfb5fa833729dc9027275319f5d9636ebc6d7ae8448c915dcc5c36a2d2a5cdb8057424208b86262fda0bddca9ddbf2e1b6bee77725fa4a5340448f92087e4b8b8cf1265280f55657e7fab8fc61b67ce3ec8dc272f607be15f371b7091dad2544c33c135fe0e9ce0a0bdfd880cef30611cb58246a164f6e387c0751c8f58080b70987ad7c6bd7f6e4072a587e3020d707866f17385831028692f9acbf5e0b7cbcd2ee78a414f244805538fe9512903a061333efdfc5c6e754167cea2a415b32eed9be8b9dd7557319d3aecc2de61a0624ce9f3bffacfd2fbed0426ed3095a44e93faf5d4ac06ff9e503591e66d0ca0bc70c5eb807f0448dd03577e672644698e6ac941bff07215c10d23221c9e6076010fc37f80250a946ae1be613e67bb9f9b1920723929212e9b691144480808428c1b27544561d6847d8bec5b71d2e8170de2d56954ba85d7bfc34aef1cc84815b8d5e6faac5fffd10d6557cef420c97c9a838fb8e995820d39433cc99c53472cf196ad55b422f4cfe3a4b30eb9e37378e8984527743a79ee9aa9881b1f4d134d4012a6213fb13cacbff3abc12ec4353eeebb24c47619f66097af031a59b5c68906e27ad1d94fbc95405872ed6a97fc3abb11384776fb8a89aa00c8fafb82019c0c2a7115a6b6e62e59062b3256b84cdf4a0a81543472777c4f7b75418adbde6e1dd061a8ad5c0c658a46bed3c117aa037686235356a6dc8692d508e6fe5def2d8b85a2d0538d64ff659d06f5f3244bafab48f32b54c181ab5e7b38f6b16aff885354c02902466d7f2fd719e9ca53bebf33c9f75c7275d479648fbe2cc2a6524475ea93edf4ca4b890636c1427004093ba3a4358f3e2efdc8d38fea995e51b6f068516b3e4d326ea7ea0f0696e6b6a012bd48d8ef5e7c9567bd94529fa887a2a1845476bc99d3df1f129ef2714ba721cc061f250b493f06a21b3f9f3b973a2c036da7974be3d695d7bfceca83ac34981ad54ab3a0cfe7ecad35fe460afa49d85d4760a37ee8dbe27e117a85e58a539a1d1c949548dc5436446edbaba32558b5cd47a0fbf4d9b792afe57f1641377b93aa3b4cc7ebf9ec70546addc69824ea1b4a74b9b5214fa31541c7fa93ab9b04010e1b276e6cadd8e4a69ca079d9c464d4bdfc854cb32614a47d8862922637570f4e1c5e4aa4d509460bdf65690056d6f46b2ff9b587cb76cea17cbc0e2543171fe0bf4f3c43ee76d01c863958edd0e07a0a4b6713b5b438b358aa91e1190109e1521988c3a4577e50fa10fb435e9eeef93c3dd4ad2e4134f112f399efd46280aeb08469cddb771fab9ee26d7e0f4983ccdaa1ed09d16b4910141772fe936c50b6c686ed6070e175d3cf1aec8856d6e35189a1729077d3c4a7d041f90d0ffe7db2b0f58c9817a962ba7d179995a5229d90da2fb2c5d50a1900e6481aacda675a97a4787c65721ec0182a5ef88970070e04aa9ca61e913ba681c0acddcb21302124c66bad012c1cda3cbf5290e59f3daca01d288c4d151393f74dacb7d2d08211341ec87dd97125ad90e3f90db42d0215b51d2e7df6e800d17ec0428e493a17f0ea7ae1534d0c2ea80d518685a30c8332349b66521f9fd1437645a99d2f5c022c9025534e92688735e411d3e398a284009244a6e9b1d5fac4ed80c12ae51da25dae3cf625212f9425ae6592b1c6b28ac4d524ab1857b295b2a8a1c5b3affe0342cf60876c37f06901e3a3f21c5ce523511f17f22bbdb3401dbdce21837f1d87061ed28a61fee4693c5564a488a597911f47057c4931eb7881dd1c0a1ae14c4469a6e954ce0f1400cb1c15d7463414935df55c0fc85948a4a7d7f9198c35b49f18d9f55056ee891853b7cef2e8c56b088e6c370f2bea080f484e39d8766fe2d7b9bcb1cdd5297949e86619586af83947de8bbfc472b338c84d86531f4efb9895bff069e669e0d47125d9ae19266e24234b5f34a6848caf33e9c54c2a213e1094304fc2d4cecd68b5ea02e62366f3b0e6da8caa9ff1b88d2bb36c847609cff9834eae92f18e86ef30c0ccf63a2b4bf4a6c8de26bbacfc9652d72b11a0d719c99aa58473e76c363965cf3edb1e9170de8d5d1ac7929d1070b3c1bc85951b2d66d6856aa7eb96832c144a3ea91170226e16b333e37fa8b333e57c2fff5478eb36364193a0c347b0518707643a8a095475192f0b83f33639582424d29f146ab284cb59e4e2bc80a9cf1c73c2c4717063290618ca5c95c82ab320e8a5a0cbf2d7332db973f8df16d55cb27c5fe7df7d990d83a1e97f7792df327a202070b2601621f3b07622d252c0ec56f82536918350e2ac7eec9f55f9ad405c96788795975641d2b7793a569f48f9a70c35d29166dbf34c5631b96edab0a168cc0fe9d2616ff396cac8f3e904f4f5930a840127561e0fbc7a38931bd5bea06d2c99e98f685df1134b3f64433cdf11ba3163c7db9493b45da0b4ad6a4bfe360be683773d89afbb68cbfa7aa39d6ea2a0595a0b245664d595901e379f2df92b2c4459c1814819951b599e2f12700c43b969149f4cd8e24b1ee1b606f3a01b6afcabf885dd72fa38dd17da880ca73479ade2f03b26926a17c8c4ab715fd5d5ea71d70e7a33f9ecca31e447f08dea2f14fb44be84bc83ef864d4a39718a784264cee04201025dde9f9869f2c0c9ed672a9b3e4d86a6dffd9645f7c6fa3775a0c63866b07e7f462b28dbc60b1243e5127735acfd6700bdfb1e00c5903ea56f1db530a6382fda90af2a3d24cca19c36847d63269129532c49c61cef35b13d20e370b5578d3749efa3a462dbc9243bb195bf0a53968ace009e37af2c61ad8866883e5660b5f0771f8e68f077d1e2bdfe8c4df8e0b550eff363b2918c32fe3b8a67fb4d305b02884009d15a0ba9de31227ca7ce2dd2e0a0b218d69b4584da23b938ea6a75160135afa00d6cbfc8cfd09e459fded4082ebf43323913fbb94b569a045f41408000bbea54169d5ddfc8e8265b40826d7d81a648441b7353546a5e94ad63086afd61b8a1f01f75a1c314a7c0c9d60592380252996542ca22635735d30c62ae9e7476eecb04d0256a62797f02cf95a8f4e76a3d8bb9edfd5d366e3b5a0ddcc3cb75181a319690cedcc87761d32891ae0fcd0d7c9d1d0f021c9265af1fe86dfceab9606bcd5c6a46d31208140e1d3a78ea9e1eca9ad240134f6b1f1dd8f1f25582eb3c12245260ef1866c83cd1603f3a8c3357575302cacf322130cd7eafe50a08ca87b24ff70a7d6a801bf320800af5d1418268a65fb64b929eb5b3ffd2e9d4580752490eb32c21cab9d816f2daf31bde3cf1a5d953fdae116d231bcec45186624b45a86efe9b051e665ce8c53ca4a89b4ba45710cff9a6ab957ef6d1518794ec2efed9bfed5f75017266ea6ad856dc1d0a4a3aaafd0ef13ba8c6c4b33bb6820e1805755cd2326a94aa700e7a5cba559ec9ab1948d2cd94c0dbb25f54fd417cb77f2b641a55fbc2354dc4486a7ef9218250219bf9b7e3daf84e42ffa437e781e000df5b5b2cb56904dd6c43063a73ac3a715040695392621dcd597dc4c445a129590d64e5c3ae062e51bef42050379f42e9ebea0d3253368f470c275a8690e572bc1de8067d4fef8bd3cd6751fc030bab321da3fc1603f9b32bcd4ce691456283089b720c4ab28204b6da6749aeed3d6ad2d562d73652489368424e9f212153d1cea4013432547570042b11981ccd323bc33b391c119027480c91e740b089e503adc3f460e219f54089c69163891fa567dcdfb0e2967894f9eb9610234542cbf"}, {&(0x7f0000000300)="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"}, {&(0x7f0000000600)="41eb8434ec1f298fb16611108e3c4194dd8566b2bed0748297be97ce5efe53647429af48470c8c646b77239368a06964567062ba0e380953a323a6bdde912d560f7aaeac18d9a07414ca9946e692eb3c0ab0a593e64d1a94f801c5b91cf57b03af3088b724c6a8d9c09ce77ebcbca990e12de49d886e6a1599ec734b9b3f7b0ef0aa5f64910d4f787fb3ea65335e6fdd57478f97e42065d17377e24a181db83e7ba6e8429fe347917c36c235f256bf74e92c86aa46528f49fafc233890df6b8f9f2628c53bc17f50390db475a1481023c187eb4b1bb82ffaa4fb3de69a5012c7453ee8d6a54282"}, {&(0x7f0000000200)="8c2082a7771913410421674a0e653bcce3963c1f812c4f6a932636e6d9765518ac84a823cfd14c6675bab810091ca1c6a32dface4f85b925dd67f46feaf54f6be254011190157e76"}, {&(0x7f0000000280)="6581986c09c75e70a8e67886f5c56b57784f"}, {&(0x7f0000000400)="7a248ada9f56be98c94c667adbd5c84189bc2ae43096c1a69c454b7b9ec0c5a1ab68879180f4621112c7b83566d4739f4b427615137e87e3e42e39c6f9146d94db17ddf279fe6b859cca5e589cac51f4f5d8a7c097307030a17066455cfe764b1280704fa9c21de923ae03d3d83e1f0e58cd4bf40b130c79f9cf1e0c1764f1cea4ac72f97159caafdbf18e0c50a022793ef925e3201a03d587dbb6a9ad2e"}], 0x2b59d3a2bb23ec15, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/65)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1610.311121] binder: 3029:3031 ioctl 40046207 0 returned -16
[ 1610.320987] binder: release 3029:3031 transaction 1000 out, still active
[ 1610.329542] binder: undelivered TRANSACTION_COMPLETE
[ 1610.340850] binder: send failed reply for transaction 1000, target dead
05:53:02 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0)
ftruncate(r0, 0x100000000000002)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x802, 0x0)
sendfile(r1, r0, 0x0, 0x40800fff)
readv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc)

05:53:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:53:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0xffffff7f00000000]}]}})

05:53:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x511001, 0x0)

05:53:02 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000280)={0x15000, 0xf000, 0xff, 0x5})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000016c0)='tls\x00', 0xfffffff2)
openat$apparmor_task_exec(0xffffffffffffff9c, 0xfffffffffffffffd, 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f00000002c0)={0x800, {0x4, 0x2}})
pread64(r2, &(0x7f00000003c0)=""/4096, 0x1000, 0x0)
clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000200), 0x4)
lookup_dcookie(0x20, &(0x7f0000001480)=""/217, 0xd9)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001580)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001400)=0xe8)
getgroups(0xa, &(0x7f0000001680)=[0x0, 0xffffffffffffffff, <r4=>0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0x0, 0xee01, 0x0])
chown(&(0x7f0000000240)='./file0\x00', r3, r4)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)="6e667300eff16117129ed0598aa8d4", 0x0, &(0x7f0000000000))
ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000013c0)={0x2, 0x14000, 0x20000000001, 0x101, 0x10000})
writev(r1, &(0x7f0000001440)=[{&(0x7f0000000340)="48a8fb8106af8dd956b93091d849e62cf112eee347e8240669", 0x19}], 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff)
clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)=<r5=>0x0)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000001700)=r5)

05:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900fb002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1610.488333] binder: undelivered TRANSACTION_ERROR: 29189
[ 1610.568958] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1610.597912] binder: 3081:3083 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
05:53:02 executing program 2:
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x80, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8)
clock_gettime(0x0, &(0x7f0000000480)={<r6=>0x0, <r7=>0x0})
clock_gettime(0x0, &(0x7f00000004c0)={<r8=>0x0, <r9=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000015c0)={&(0x7f0000000440)={0x1d, r5}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x7, 0x84, 0x0, {r6, r7/1000+30000}, {r8, r9/1000+10000}, {0x0, 0x4, 0x3, 0x7}, 0x1, @can={{0x4, 0x4, 0x401, 0x2}, 0x4, 0x2, 0x0, 0x0, "0c0ea09be570f375"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)})
r10 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
execveat(r10, &(0x7f0000000000)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1100)
r11 = add_key(&(0x7f0000001600)='ceph\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)="818ad7a92484d4b45422a3154886e027e57379a9d54800d350dd9aa799c4f4a678079a01c8a690f7a2f14003a5ee71ed3cf8e628ab20294db25a65269496ad5efc364bae5ecd325f363ad7b4cb6a7aee", 0x50, 0xffffffffffffffff)
r12 = add_key$keyring(&(0x7f0000001700)='keyring\x00', &(0x7f0000001740)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r11, r12)
close(r4)
r13 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2)
read$FUSE(r3, &(0x7f00000005c0), 0x1000)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"766574683154746f5f626f6e6458b506", 0x3802})
setsockopt$bt_BT_DEFER_SETUP(r13, 0x112, 0x7, &(0x7f0000001780)=0x9, 0x4)
close(r2)
openat$cgroup_int(r4, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0)
ioctl$PPPOEIOCDFWD(r10, 0xb101, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f0000000240)={0x0, {0x0, 0x989680}, 0xffffffffffff8000, 0x6})
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)

05:53:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x7000000]}]}})

[ 1610.667209] binder_alloc: binder_alloc_mmap_handler: 3081 20001000-20004000 already mapped failed -16
05:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29029a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1610.712726] binder: BINDER_SET_CONTEXT_MGR already set
[ 1610.737440] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1610.757004] binder: 3081:3083 ioctl 40046207 0 returned -16
05:53:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2f, &(0x7f00000001c0)=""/156, &(0x7f0000000040)=0xffffffffffffff79)
clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000180)={0x0, 0x1c9c380}, 0x8)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000140))
r1 = getpid()
rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f0000000100))
ptrace(0x10, r1)
wait4(0x0, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000003, 0x0)
r2 = socket$inet6(0xa, 0x80a, 0x79)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

05:53:02 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x10000000000000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@ipv4={[], [], @multicast2}, @loopback, @local, 0x2, 0x8, 0xfffffffffffffeff, 0x100, 0x4, 0x2000000, r2})
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1610.786661] binder_alloc: 3081: binder_alloc_buf, no vma
[ 1610.796175] binder: 3081:3120 BC_FREE_BUFFER u0000000020001000 no match
05:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29017e002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:02 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0x0, 0x10000)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80, 0x0)
ioctl$LOOP_SET_CAPACITY(r3, 0x4c07)

[ 1610.854157] binder: 3081:3113 transaction failed 29189/-3, size 0-0 line 2973
[ 1610.857807] binder: release 3081:3083 transaction 1003 out, still active
[ 1610.886479] binder: undelivered TRANSACTION_COMPLETE
05:53:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x600]}]}})

[ 1610.920314] binder: undelivered TRANSACTION_ERROR: 29189
[ 1610.945153] binder: send failed reply for transaction 1003, target dead
[ 1610.985528] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1611.043376] binder: 3147:3148 BC_FREE_BUFFER u0000000000000000 no match
05:53:02 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290063002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x6000]}]}})

[ 1611.099836] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.107279] binder: 3147:3157 BC_FREE_BUFFER u0000000000000000 no match
[ 1611.153517] binder: 3147:3156 ioctl 40046207 0 returned -16
05:53:02 executing program 1:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x1004000002802, 0x0)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0xffffffffffffff07}, 0xc)

05:53:02 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x200000006, 0x10600)
r0 = syz_open_dev$usbmon(&(0x7f0000000b00)='/dev/usbmon#\x00', 0x2, 0x0)
close(r0)

[ 1611.195702] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:02 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x4c00]}]}})

05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29014a002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, 0x0})
r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2)
ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000040)={0x1, 0x3, 0x1, 0x602})

05:53:03 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0xd1}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000140)=0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x2)
preadv(r3, &(0x7f0000000480), 0x100000000000020b, 0x0)

[ 1611.324191] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1611.355598] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x6, 0x2, 0x80000001, 0x4, <r2=>0x0}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={<r3=>0x0, 0x4, 0x20, 0x6, 0x1}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x7, 0x7, 0xfffffffffffffff7, 0x2, 0x9, 0x0, 0x17, {r3, @in6={{0xa, 0x4e24, 0x6, @loopback, 0x3}}, 0x800, 0x1000, 0x1, 0xe77, 0x5}}, &(0x7f0000000280)=0xb0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x13f, 0xb}}, 0x20)
write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000380)={0xf, 0x8, 0xfa00, {r6, 0x7}}, 0x10)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

05:53:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x74]}]}})

05:53:03 executing program 2:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)
dup2(r0, r0)
syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000700000000000019078ac2314bbac1414110304907800000000450000001400084000000000000000000000e000000200000000e000000100000000000000007f00000100000000ffffffff00000000e000000100000000ac14140000000000"], 0x0)
r1 = fcntl$getown(r0, 0x9)
pwrite64(r0, &(0x7f0000000140)="873ad2afd97e5582bd40732c3a2b0087ca2afd7ae2f636aeed394a68bf337d8968d66696cedef9f6bd4b481c4a96eaabcd036c34ceb14f933da6818d59fae87b07ea", 0x42, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x7)

[ 1611.411002] binder: 3187:3188 BC_FREE_BUFFER u0000000020001000 matched unreturned or currently freeing buffer
[ 1611.485909] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="290088002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:03 executing program 2:
socketpair(0x0, 0x1, 0x3fcf, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/219, 0xdb}], 0x1}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00001e1e78)}], 0x492492492492321, 0x0)

05:53:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0xfecaedfe00000000]}]}})

[ 1611.534877] binder_alloc: binder_alloc_mmap_handler: 3187 20001000-20004000 already mapped failed -16
[ 1611.558562] binder: BINDER_SET_CONTEXT_MGR already set
[ 1611.567785] binder: 3187:3188 ioctl 40046207 0 returned -16
[ 1611.573737] binder_alloc: 3187: binder_alloc_buf, no vma
[ 1611.610207] binder: 3187:3225 BC_FREE_BUFFER u0000000020001000 no match
05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900d9002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1611.655192] binder: 3187:3213 transaction failed 29189/-3, size 0-0 line 2973
[ 1611.668988] binder: release 3187:3188 transaction 1007 out, still active
[ 1611.681233] binder: undelivered TRANSACTION_COMPLETE
[ 1611.692059] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1611.706517] binder: send failed reply for transaction 1007, target dead
05:53:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x4000, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x49a, 0x2200)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r4 = mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f00000001c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0})

05:53:03 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0xd1}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000140)=0x8)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00')
ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x2)
preadv(r3, &(0x7f0000000480), 0x100000000000020b, 0x0)

05:53:03 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000240)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000680)=<r3=>0x0)
r4 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0x3, 0x1)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={<r5=>0x0}, &(0x7f0000000400)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000480)={<r6=>r5, 0x1, 0x30, 0x31ab, 0x5}, &(0x7f00000004c0)=0x18)
sched_getattr(r3, &(0x7f00000006c0), 0x30, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000007c0)={"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"})
fsetxattr$security_smack_entry(r0, &(0x7f00000005c0)='security.SMACK64IPIN\x00', &(0x7f0000000600)='\x00', 0x1, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, &(0x7f0000000400), 0x0)
r7 = fcntl$dupfd(r0, 0x406, r1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x50, &(0x7f0000000080)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r7, 0x0, 0x1, &(0x7f0000000000)='\x00', r8}, 0x30)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f00000002c0)={0x0, 0x7, 0x9, 'queue0\x00', 0x1})
r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffb000/0x3000)=nil)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000500)={0xffffffffffffff17, 0x1, 0x3, 0x6, r6}, 0x10)
ioctl$VIDIOC_G_TUNER(r7, 0xc054561d, &(0x7f00000001c0)={0x3, "5b1e4ff665cf0ed80f45d753f998a2484c4a36f4cf8ba10038317a39ac144568", 0x7, 0x1902, 0x0, 0x7, 0xa, 0x3, 0x1f})

05:53:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x6c000000]}]}})

[ 1611.760398] binder: undelivered TRANSACTION_ERROR: 29189
05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29ef01002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
sendto$inet6(r1, &(0x7f0000000180)="61b1701bf7f0746bbc416dbe54dd06db13f5a35cc957015fb455f56cb585ff3ab238dc94486106214266972f7fd495f200a665c09b29be487d5b0f035c429ff6aba48dbff7e1b56a056d597eda8020382749022a9d730dd0251e5048379d8f442d7bf73265ec73e7a0f473c49a8bd6c448e68733efc630a80304d3b1581af26db820a96e2c6482662db68179c37484a10dc76c0b40ace1b9a3d5a90529c99fc9", 0xa0, 0x40, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0xd}, 0x8}, 0x1c)
pwritev(r1, &(0x7f00000000c0), 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x8000, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
write$UHID_CREATE(r2, &(0x7f0000000600)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000300)=""/246, 0xf6, 0x400, 0x1d, 0x5, 0x3ff, 0xffff}, 0x120)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1611.886081] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1611.912476] binder: 3253:3254 BC_FREE_BUFFER u0000000020001000 no match
05:53:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0xfecaedfe]}]}})

05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299500002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1612.002796] binder_alloc: binder_alloc_mmap_handler: 3253 20002000-20006000 already mapped failed -16
[ 1612.028007] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.080404] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1612.098256] binder: 3253:3254 ioctl 40046207 0 returned -16
[ 1612.099821] binder: release 3253:3254 transaction 1010 out, still active
05:53:03 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x60000000]}]}})

05:53:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082)
r1 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast1}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
gettid()
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
mlockall(0x0)
socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0xff, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0xe, 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'ipddp0\x00', @broadcast})
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r1, 0x0, 0x20000102000007)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)

[ 1612.128810] binder: undelivered TRANSACTION_COMPLETE
[ 1612.147438] binder: send failed reply for transaction 1010, target dead
05:53:03 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x1)
fcntl$setstatus(r1, 0x4, 0x2800)
ioctl$TCXONC(r1, 0x540a, 0x0)
write(r1, &(0x7f0000fd6000)='z', 0x1)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019)
dup3(r1, r0, 0x0)

05:53:03 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29a302002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

05:53:03 executing program 3:
r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0})
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x2, 0x1}], 0x0, 0x0, 0x0})

[ 1612.223857] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
05:53:04 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/zero\x00', 0x400000, 0x0)
listen(r0, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@dev={0xfe, 0x80, [], 0xa}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0xa, @in, 0x0, 0x3}}, 0xe8)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
recvmsg(r1, &(0x7f0000000900)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000380)=""/228, 0xe4}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f0000000600)=""/13, 0xd}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f00000006c0)}, {&(0x7f0000000700)=""/98, 0x62}], 0x8, &(0x7f0000000800)=""/197, 0xc5, 0x1}, 0x42)
recvfrom$inet6(r1, &(0x7f0000000240)=""/165, 0xa5, 0x2000, &(0x7f0000000080)={0xa, 0x4e22, 0x5, @empty, 0x3ff}, 0x1c)
sendmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xffffffffffffff6a, 0x0}}, {{&(0x7f0000000580)=@in={0x2, 0x4e21, @multicast2, [0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00]}, 0x80, 0x0}}], 0x2, 0x0)

05:53:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}]}})

05:53:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="2900c6002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1612.381640] binder: 3297:3300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[ 1612.432100] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1612.441337] ==================================================================
[ 1612.442280] binder_alloc: binder_alloc_mmap_handler: 3297 20001000-20004000 already mapped failed -16
[ 1612.449104] BUG: KASAN: stack-out-of-bounds in xfrm_state_find+0x396b/0x3eb0
[ 1612.449121] Read of size 4 at addr ffff88817a627308 by task syz-executor2/3307
[ 1612.449126] 
[ 1612.449144] CPU: 0 PID: 3307 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #363
[ 1612.449155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1612.449161] Call Trace:
[ 1612.449186]  dump_stack+0x244/0x39d
[ 1612.449212]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 1612.449228]  ? printk+0xa7/0xcf
[ 1612.449246]  ? kmsg_dump_rewind_nolock+0xe4/0xe4
[ 1612.449296]  print_address_description.cold.7+0x9/0x1ff
[ 1612.449321]  kasan_report.cold.8+0x242/0x309
[ 1612.521150]  ? xfrm_state_find+0x396b/0x3eb0
[ 1612.525580]  __asan_report_load4_noabort+0x14/0x20
[ 1612.530534]  xfrm_state_find+0x396b/0x3eb0
[ 1612.534818]  ? xfrm_state_afinfo_get_rcu+0x1b0/0x1b0
[ 1612.534843]  ? perf_trace_lock+0x14d/0x7a0
[ 1612.534856]  ? find_held_lock+0x36/0x1c0
[ 1612.534874]  ? attach_entity_load_avg+0x860/0x860
[ 1612.534890]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1612.534909]  ? check_preemption_disabled+0x48/0x280
[ 1612.534935]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1612.564045] binder: BINDER_SET_CONTEXT_MGR already set
[ 1612.569337]  ? check_preemption_disabled+0x48/0x280
05:53:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x0, 0x0, 0x400}, 0x6)
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x1f, 0x1)
ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000080)={[0x6001, 0xf000, 0x2, 0x10000], 0xfffffffffffffff7, 0x20, 0x7})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0)
readv(r1, &(0x7f0000000180)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000380)=""/184, 0xb8}], 0x34b)

05:53:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="299302002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1612.569359]  ? print_usage_bug+0xc0/0xc0
[ 1612.569372]  ? debug_smp_processor_id+0x1c/0x20
[ 1612.569387]  ? perf_trace_lock+0x14d/0x7a0
[ 1612.569402]  ? lock_is_held_type+0x210/0x210
[ 1612.569415]  ? rcu_softirq_qs+0x20/0x20
[ 1612.569437]  ? lock_is_held_type+0x210/0x210
[ 1612.569455]  ? zap_class+0x640/0x640
[ 1612.569470]  ? find_held_lock+0x36/0x1c0
[ 1612.569497]  ? __lock_acquire+0x62f/0x4c20
[ 1612.609240]  ? cpuacct_charge+0x265/0x440
[ 1612.609277]  ? print_usage_bug+0xc0/0xc0
[ 1612.609307]  ? mark_held_locks+0x130/0x130
05:53:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x6800000000000000]}]}})

[ 1612.617622]  ? is_bpf_text_address+0xac/0x170
[ 1612.617645]  xfrm_tmpl_resolve+0x3c0/0xe50
[ 1612.617682]  ? __xfrm_decode_session+0x140/0x140
[ 1612.617699]  ? kernel_text_address+0x79/0xf0
[ 1612.617717]  ? zap_class+0x640/0x640
[ 1612.617731]  ? unwind_get_return_address+0x61/0xa0
[ 1612.617751]  ? __save_stack_trace+0x8d/0xf0
[ 1612.617779]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1612.651833]  ? check_preemption_disabled+0x48/0x280
[ 1612.663179] binder: 3297:3300 ioctl 40046207 0 returned -16
[ 1612.666633]  ? debug_smp_processor_id+0x1c/0x20
[ 1612.666653]  ? perf_trace_lock+0x14d/0x7a0
[ 1612.666679]  xfrm_resolve_and_create_bundle+0x184/0x2800
[ 1612.666703]  ? __local_bh_enable_ip+0x160/0x260
[ 1612.666721]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 1612.666736]  ? zap_class+0x640/0x640
[ 1612.666750]  ? _raw_spin_unlock_bh+0x30/0x40
[ 1612.666771]  ? xfrm_migrate+0x19d0/0x19d0
[ 1612.682180]  ? check_preemption_disabled+0x48/0x280
[ 1612.682200]  ? rt_add_uncached_list+0x1e1/0x280
[ 1612.682224]  ? find_held_lock+0x36/0x1c0
[ 1612.682251]  ? xfrm_sk_policy_lookup+0x484/0x640
[ 1612.692680] binder_alloc: 3297: binder_alloc_buf, no vma
[ 1612.696620]  ? lock_downgrade+0x900/0x900
[ 1612.696640]  ? check_preemption_disabled+0x48/0x280
[ 1612.696661]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 1612.696678]  ? kasan_check_read+0x11/0x20
[ 1612.696693]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1612.696706]  ? rcu_softirq_qs+0x20/0x20
[ 1612.696723]  ? __sanitizer_cov_trace_switch+0x53/0x90
[ 1612.696756]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1612.696780]  ? xfrm_sk_policy_lookup+0x4ab/0x640
05:53:04 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000ac9000)="29009c002000190f00003fffffffda060200000600e80001040000040d000c00ea1100000005000000", 0x29}], 0x1)

[ 1612.696803]  ? xfrm_selector_match+0xf90/0xf90
[ 1612.696819]  ? check_preemption_disabled+0x48/0x280
[ 1612.696840]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1612.724109] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1612.727461]  ? xfrm_expand_policies+0x2ab/0x6f0
[ 1612.727487]  xfrm_lookup_with_ifid+0x39e/0x2b80
[ 1612.727504]  ? xfrm_lookup_with_ifid+0x39e/0x2b80
[ 1612.727522]  ? update_irq_load_avg+0x4e2/0xee0
[ 1612.727545]  ? xfrm_policy_lookup+0x80/0x80
[ 1612.727563]  ? zap_class+0x640/0x640
[ 1612.727585]  ? ip_route_input_noref+0x260/0x260
05:53:04 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x0, 0x0, 0x56595559, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x6000000000000000]}]}})

[ 1612.727611]  ? find_held_lock+0x36/0x1c0
[ 1612.727637]  ? ip_route_output_key_hash+0x270/0x3b0
[ 1612.727657]  ? lock_downgrade+0x900/0x900
[ 1612.733922] binder: 3297:3316 transaction failed 29189/-3, size 0-0 line 2973
[ 1612.737906]  ? check_preemption_disabled+0x48/0x280
[ 1612.737927]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 1612.737943]  ? kasan_check_read+0x11/0x20
[ 1612.737957]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1612.737973]  ? rcu_softirq_qs+0x20/0x20
[ 1612.737989]  ? find_held_lock+0x36/0x1c0
[ 1612.738020]  ? ip_route_output_key_hash+0x297/0x3b0
[ 1612.738040]  ? ip_route_output_key_hash_rcu+0x3490/0x3490
[ 1612.738067]  xfrm_lookup_route+0x3c/0x1f0
[ 1612.738085]  ip_route_output_flow+0xb1/0xc0
[ 1612.738112]  udp_sendmsg+0x223a/0x3c70
[ 1612.771520] binder: 3297:3300 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[ 1612.776324]  ? kasan_check_read+0x11/0x20
[ 1612.776345]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1612.776370]  ? ip_reply_glue_bits+0xc0/0xc0
[ 1612.776395]  ? udp_v4_get_port+0x180/0x180
[ 1612.776414]  ? kasan_check_read+0x11/0x20
[ 1612.776428]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1612.776450]  ? nf_nat_ipv6_out+0x212/0x550
[ 1612.813255] binder: release 3297:3300 transaction 1012 out, still active
[ 1612.815924]  ? print_usage_bug+0xc0/0xc0
[ 1612.815947]  ? print_usage_bug+0xc0/0xc0
[ 1612.815972]  ? ip6_output+0x23a/0x9d0
[ 1612.815991]  ? ip6_finish_output+0xc60/0xc60
[ 1612.816017]  ? __lock_acquire+0x62f/0x4c20
[ 1612.816034]  ? ip_reply_glue_bits+0xc0/0xc0
[ 1612.816061]  ? mark_held_locks+0x130/0x130
[ 1612.826953] binder: undelivered TRANSACTION_COMPLETE
[ 1612.828675]  ? mark_held_locks+0x130/0x130
[ 1612.828698]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1612.828718]  ? udp_v6_send_skb.isra.26+0x908/0x1540
[ 1612.828754]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1612.828776]  udpv6_sendmsg+0x182f/0x36b0
[ 1612.828795]  ? udpv6_sendmsg+0x182f/0x36b0
[ 1612.860330] binder: send failed reply for transaction 1012, target dead
[ 1612.863867]  ? perf_trace_lock+0x14d/0x7a0
[ 1612.863891]  ? debug_smp_processor_id+0x1c/0x20
[ 1612.863923]  ? udp6_unicast_rcv_skb.isra.24+0x320/0x320
[ 1612.863943]  ? zap_class+0x640/0x640
[ 1612.881404]  ? perf_trace_lock+0x14d/0x7a0
[ 1612.881426]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1612.881443]  ? zap_class+0x640/0x640
[ 1612.881460]  ? print_usage_bug+0xc0/0xc0
[ 1612.881480]  ? lock_is_held_type+0x210/0x210
[ 1612.892050]  ? find_held_lock+0x36/0x1c0
[ 1612.892083]  ? lock_downgrade+0x900/0x900
[ 1612.892113]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1613.071952]  ? lock_release+0xa00/0xa00
[ 1613.075934]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1613.081410]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1613.086964]  ? aa_label_sk_perm+0x91/0x100
[ 1613.091220]  ? debug_lockdep_rcu_enabled+0x77/0x90
[ 1613.096169]  ? aa_sk_perm+0x22b/0x8e0
[ 1613.099981]  ? import_iovec+0x2a3/0x4b0
[ 1613.103981]  ? aa_af_perm+0x5a0/0x5a0
[ 1613.107858]  inet_sendmsg+0x1a1/0x690
[ 1613.111688]  ? udp6_unicast_rcv_skb.isra.24+0x320/0x320
[ 1613.117084]  ? inet_sendmsg+0x1a1/0x690
[ 1613.121077]  ? ipip_gro_receive+0x100/0x100
[ 1613.125416]  ? apparmor_socket_sendmsg+0x29/0x30
[ 1613.130185]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.135737]  ? security_socket_sendmsg+0x94/0xc0
[ 1613.140510]  ? ipip_gro_receive+0x100/0x100
[ 1613.144844]  sock_sendmsg+0xd5/0x120
[ 1613.148574]  ___sys_sendmsg+0x51d/0x930
[ 1613.152560]  ? zap_class+0x640/0x640
[ 1613.156303]  ? copy_msghdr_from_user+0x580/0x580
[ 1613.161082]  ? find_held_lock+0x36/0x1c0
[ 1613.165165]  ? __might_fault+0x12b/0x1e0
[ 1613.169257]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1613.174760]  __sys_sendmmsg+0x246/0x6d0
[ 1613.178759]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1613.183119]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1613.188668]  ? put_timespec64+0x10f/0x1b0
[ 1613.192822]  ? nsecs_to_jiffies+0x30/0x30
[ 1613.196982]  ? do_syscall_64+0x9a/0x820
[ 1613.200966]  ? do_syscall_64+0x9a/0x820
[ 1613.204947]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 1613.209537]  ? trace_hardirqs_on+0xbd/0x310
[ 1613.213870]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.219423]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1613.224799]  ? trace_hardirqs_off_caller+0x310/0x310
[ 1613.229932]  __x64_sys_sendmmsg+0x9d/0x100
[ 1613.234179]  do_syscall_64+0x1b9/0x820
[ 1613.238070]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1613.243443]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1613.248376]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1613.253230]  ? trace_hardirqs_on_caller+0x310/0x310
[ 1613.258256]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1613.263314]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1613.268348]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1613.273208]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1613.278404] RIP: 0033:0x457569
[ 1613.281601] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1613.300510] RSP: 002b:00007f250e913c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1613.308228] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569
[ 1613.315502] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003
[ 1613.322770] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1613.330049] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f250e9146d4
[ 1613.337322] R13: 00000000004c3c33 R14: 00000000004d6248 R15: 00000000ffffffff
[ 1613.344612] 
[ 1613.346233] The buggy address belongs to the page:
[ 1613.351221] page:ffffea0005e989c0 count:0 mapcount:0 mapping:0000000000000000 index:0x0
[ 1613.359364] flags: 0x2fffc0000000000()
[ 1613.363260] raw: 02fffc0000000000 0000000000000000 ffffffff05e90101 0000000000000000
[ 1613.371171] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1613.379054] page dumped because: kasan: bad access detected
[ 1613.384760] 
[ 1613.386382] Memory state around the buggy address:
[ 1613.391319]  ffff88817a627200: f2 f2 00 00 00 00 00 f2 f2 f2 f2 f2 f2 f2 00 00
[ 1613.398682]  ffff88817a627280: 00 00 00 00 f2 f2 f2 f2 f2 f2 00 00 00 00 00 00
[ 1613.406061] >ffff88817a627300: 00 f2 f2 f2 f2 f2 04 f2 f2 f2 f2 f2 f2 f2 f8 f2
[ 1613.413837]                       ^
[ 1613.417468]  ffff88817a627380: f2 f2 f2 f2 f2 f2 00 00 00 00 00 00 00 00 00 f2
[ 1613.424854]  ffff88817a627400: f2 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1613.432220] ==================================================================
[ 1613.439584] Disabling lock debugging due to kernel taint
[ 1613.485596] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[ 1613.542188] Kernel panic - not syncing: panic_on_warn set ...
[ 1613.542344] binder: undelivered TRANSACTION_ERROR: 29189
[ 1613.548145] CPU: 0 PID: 3307 Comm: syz-executor2 Tainted: G    B             4.20.0-rc5+ #363
[ 1613.548154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1613.548159] Call Trace:
[ 1613.548197]  dump_stack+0x244/0x39d
[ 1613.548218]  ? dump_stack_print_info.cold.1+0x20/0x20
[ 1613.548241]  panic+0x2ad/0x55c
[ 1613.586197]  ? add_taint.cold.5+0x16/0x16
[ 1613.586216]  ? preempt_schedule+0x4d/0x60
[ 1613.586233]  ? ___preempt_schedule+0x16/0x18
[ 1613.586251]  ? trace_hardirqs_on+0xb4/0x310
[ 1613.586282]  kasan_end_report+0x47/0x4f
[ 1613.586307]  kasan_report.cold.8+0x76/0x309
[ 1613.586331]  ? xfrm_state_find+0x396b/0x3eb0
[ 1613.615967]  __asan_report_load4_noabort+0x14/0x20
[ 1613.615987]  xfrm_state_find+0x396b/0x3eb0
[ 1613.616036]  ? xfrm_state_afinfo_get_rcu+0x1b0/0x1b0
[ 1613.616056]  ? perf_trace_lock+0x14d/0x7a0
[ 1613.616101]  ? find_held_lock+0x36/0x1c0
[ 1613.616118]  ? attach_entity_load_avg+0x860/0x860
[ 1613.616135]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.616155]  ? check_preemption_disabled+0x48/0x280
[ 1613.616174]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.616190]  ? check_preemption_disabled+0x48/0x280
[ 1613.616209]  ? print_usage_bug+0xc0/0xc0
[ 1613.616224]  ? debug_smp_processor_id+0x1c/0x20
[ 1613.616243]  ? perf_trace_lock+0x14d/0x7a0
[ 1613.616260]  ? lock_is_held_type+0x210/0x210
[ 1613.616297]  ? rcu_softirq_qs+0x20/0x20
[ 1613.685924]  ? lock_is_held_type+0x210/0x210
[ 1613.685942]  ? zap_class+0x640/0x640
[ 1613.685958]  ? find_held_lock+0x36/0x1c0
[ 1613.685976]  ? __lock_acquire+0x62f/0x4c20
[ 1613.685993]  ? cpuacct_charge+0x265/0x440
[ 1613.686012]  ? print_usage_bug+0xc0/0xc0
[ 1613.686033]  ? mark_held_locks+0x130/0x130
[ 1613.686070]  ? is_bpf_text_address+0xac/0x170
[ 1613.686097]  xfrm_tmpl_resolve+0x3c0/0xe50
[ 1613.723558]  ? __xfrm_decode_session+0x140/0x140
[ 1613.723581]  ? kernel_text_address+0x79/0xf0
[ 1613.732780]  ? zap_class+0x640/0x640
[ 1613.732810]  ? unwind_get_return_address+0x61/0xa0
[ 1613.732832]  ? __save_stack_trace+0x8d/0xf0
[ 1613.745791]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.745811]  ? check_preemption_disabled+0x48/0x280
[ 1613.745834]  ? debug_smp_processor_id+0x1c/0x20
[ 1613.761050]  ? perf_trace_lock+0x14d/0x7a0
[ 1613.761075]  xfrm_resolve_and_create_bundle+0x184/0x2800
[ 1613.770789]  ? __local_bh_enable_ip+0x160/0x260
[ 1613.770808]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 1613.770827]  ? zap_class+0x640/0x640
[ 1613.783786]  ? _raw_spin_unlock_bh+0x30/0x40
[ 1613.783828]  ? xfrm_migrate+0x19d0/0x19d0
[ 1613.792383]  ? check_preemption_disabled+0x48/0x280
[ 1613.792401]  ? rt_add_uncached_list+0x1e1/0x280
[ 1613.792420]  ? find_held_lock+0x36/0x1c0
[ 1613.792441]  ? xfrm_sk_policy_lookup+0x484/0x640
[ 1613.792457]  ? lock_downgrade+0x900/0x900
[ 1613.792472]  ? check_preemption_disabled+0x48/0x280
[ 1613.792490]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 1613.792506]  ? kasan_check_read+0x11/0x20
[ 1613.792520]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1613.792538]  ? rcu_softirq_qs+0x20/0x20
[ 1613.838391]  ? __sanitizer_cov_trace_switch+0x53/0x90
[ 1613.838413]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1613.849151]  ? xfrm_sk_policy_lookup+0x4ab/0x640
[ 1613.849173]  ? xfrm_selector_match+0xf90/0xf90
[ 1613.858510]  ? check_preemption_disabled+0x48/0x280
[ 1613.858532]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1613.868547]  ? xfrm_expand_policies+0x2ab/0x6f0
[ 1613.868571]  xfrm_lookup_with_ifid+0x39e/0x2b80
[ 1613.877895]  ? xfrm_lookup_with_ifid+0x39e/0x2b80
[ 1613.877917]  ? update_irq_load_avg+0x4e2/0xee0
[ 1613.887352]  ? xfrm_policy_lookup+0x80/0x80
[ 1613.887370]  ? zap_class+0x640/0x640
[ 1613.895394]  ? ip_route_input_noref+0x260/0x260
[ 1613.895417]  ? find_held_lock+0x36/0x1c0
[ 1613.904138]  ? ip_route_output_key_hash+0x270/0x3b0
[ 1613.904158]  ? lock_downgrade+0x900/0x900
[ 1613.913317]  ? check_preemption_disabled+0x48/0x280
[ 1613.913335]  ? rcu_read_unlock_special+0x1c0/0x1c0
[ 1613.923263]  ? kasan_check_read+0x11/0x20
[ 1613.923289]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1613.923308]  ? rcu_softirq_qs+0x20/0x20
[ 1613.936669]  ? find_held_lock+0x36/0x1c0
[ 1613.936695]  ? ip_route_output_key_hash+0x297/0x3b0
[ 1613.945762]  ? ip_route_output_key_hash_rcu+0x3490/0x3490
[ 1613.945786]  xfrm_lookup_route+0x3c/0x1f0
[ 1613.955468]  ip_route_output_flow+0xb1/0xc0
[ 1613.955490]  udp_sendmsg+0x223a/0x3c70
[ 1613.963681]  ? kasan_check_read+0x11/0x20
[ 1613.963698]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1613.963717]  ? ip_reply_glue_bits+0xc0/0xc0
[ 1613.977438]  ? udp_v4_get_port+0x180/0x180
[ 1613.977458]  ? kasan_check_read+0x11/0x20
[ 1613.985833]  ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170
[ 1613.985853]  ? nf_nat_ipv6_out+0x212/0x550
[ 1613.995360]  ? print_usage_bug+0xc0/0xc0
[ 1613.995380]  ? print_usage_bug+0xc0/0xc0
[ 1614.003497]  ? ip6_output+0x23a/0x9d0
[ 1614.003515]  ? ip6_finish_output+0xc60/0xc60
[ 1614.011730]  ? __lock_acquire+0x62f/0x4c20
[ 1614.011751]  ? ip_reply_glue_bits+0xc0/0xc0
[ 1614.020322]  ? mark_held_locks+0x130/0x130
[ 1614.020341]  ? mark_held_locks+0x130/0x130
[ 1614.028808]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1614.028832]  ? udp_v6_send_skb.isra.26+0x908/0x1540
[ 1614.039380]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1614.039405]  udpv6_sendmsg+0x182f/0x36b0
[ 1614.048993]  ? udpv6_sendmsg+0x182f/0x36b0
[ 1614.049023]  ? perf_trace_lock+0x14d/0x7a0
[ 1614.049058]  ? debug_smp_processor_id+0x1c/0x20
[ 1614.062209]  ? udp6_unicast_rcv_skb.isra.24+0x320/0x320
[ 1614.062228]  ? zap_class+0x640/0x640
[ 1614.071301]  ? perf_trace_lock+0x14d/0x7a0
[ 1614.071321]  ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 1614.080567]  ? zap_class+0x640/0x640
[ 1614.080584]  ? print_usage_bug+0xc0/0xc0
[ 1614.080603]  ? lock_is_held_type+0x210/0x210
[ 1614.092768]  ? find_held_lock+0x36/0x1c0
[ 1614.092791]  ? lock_downgrade+0x900/0x900
[ 1614.100987]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1614.101010]  ? lock_release+0xa00/0xa00
[ 1614.110412]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1614.110433]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1614.110453]  ? aa_label_sk_perm+0x91/0x100
[ 1614.125634]  ? debug_lockdep_rcu_enabled+0x77/0x90
[ 1614.125657]  ? aa_sk_perm+0x22b/0x8e0
[ 1614.134385]  ? import_iovec+0x2a3/0x4b0
[ 1614.134409]  ? aa_af_perm+0x5a0/0x5a0
[ 1614.142177]  inet_sendmsg+0x1a1/0x690
[ 1614.142198]  ? udp6_unicast_rcv_skb.isra.24+0x320/0x320
[ 1614.151346]  ? inet_sendmsg+0x1a1/0x690
[ 1614.151364]  ? ipip_gro_receive+0x100/0x100
[ 1614.151382]  ? apparmor_socket_sendmsg+0x29/0x30
[ 1614.164406]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1614.164427]  ? security_socket_sendmsg+0x94/0xc0
[ 1614.174715]  ? ipip_gro_receive+0x100/0x100
[ 1614.174734]  sock_sendmsg+0xd5/0x120
[ 1614.174753]  ___sys_sendmsg+0x51d/0x930
[ 1614.186724]  ? zap_class+0x640/0x640
[ 1614.186750]  ? copy_msghdr_from_user+0x580/0x580
[ 1614.195213]  ? find_held_lock+0x36/0x1c0
[ 1614.195235]  ? __might_fault+0x12b/0x1e0
[ 1614.203361]  ? perf_trace_sched_process_exec+0x860/0x860
[ 1614.203386]  __sys_sendmmsg+0x246/0x6d0
[ 1614.212808]  ? __ia32_sys_sendmsg+0xb0/0xb0
[ 1614.212843]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1614.222689]  ? put_timespec64+0x10f/0x1b0
[ 1614.222709]  ? nsecs_to_jiffies+0x30/0x30
[ 1614.230992]  ? do_syscall_64+0x9a/0x820
[ 1614.231014]  ? do_syscall_64+0x9a/0x820
[ 1614.238951]  ? lockdep_hardirqs_on+0x3bb/0x5b0
[ 1614.238976]  ? trace_hardirqs_on+0xbd/0x310
[ 1614.247858]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1614.247874]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1614.247893]  ? trace_hardirqs_off_caller+0x310/0x310
[ 1614.263889]  __x64_sys_sendmmsg+0x9d/0x100
[ 1614.263907]  do_syscall_64+0x1b9/0x820
[ 1614.272010]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1614.272029]  ? syscall_return_slowpath+0x5e0/0x5e0
[ 1614.272049]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1614.287142]  ? trace_hardirqs_on_caller+0x310/0x310
[ 1614.287164]  ? prepare_exit_to_usermode+0x3b0/0x3b0
[ 1614.297180]  ? prepare_exit_to_usermode+0x291/0x3b0
[ 1614.297200]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1614.307043]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1614.307059] RIP: 0033:0x457569
[ 1614.315461] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1614.315471] RSP: 002b:00007f250e913c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1614.342081] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457569
[ 1614.342091] RDX: 0000000000000002 RSI: 0000000020000000 RDI: 0000000000000003
[ 1614.342100] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1614.342115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f250e9146d4
[ 1614.371155] R13: 00000000004c3c33 R14: 00000000004d6248 R15: 00000000ffffffff
[ 1614.379433] Kernel Offset: disabled
[ 1614.383056] Rebooting in 86400 seconds..